last executing test programs: 15m1.823251068s ago: executing program 32 (id=978): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000006000000010000000100000000000000", @ANYRES32=0x1, @ANYBLOB="350100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010000bd70004bdd5508e44883ac"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x5, 0x32, 0x7}, 0x9c) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) 14m57.12932511s ago: executing program 33 (id=935): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x34}, 0x28) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4004815) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) pselect6(0x40, &(0x7f0000000040)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 14m55.632280633s ago: executing program 34 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r1], 0x28}}, 0x0) 14m32.385405937s ago: executing program 35 (id=1003): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000005, 0x3, 0x2, 0x200000000b4c, 0x9, 0x200000000009, 0xf, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x9e0d8ca8e8158ed5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x9, 0x8}, 0x0, 0x0) socket$inet6(0xa, 0x4, 0xdc9a5841) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 14m20.884267964s ago: executing program 36 (id=1016): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x7a9095e4ff480c4f, 0xba) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f00000000c0)={0x8, 0x100008d}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) fallocate(r4, 0xa, 0x969, 0x200401) fallocate(r4, 0x0, 0x7, 0x200401) r5 = timerfd_create(0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000002680)=""/4082, 0x1001}], 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x20008800) 13m59.245727747s ago: executing program 37 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$mouse(0x0, 0x0, 0x2042) read$fb(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001000000000800000000aca47601000000000000000000004000fe8000000000000000000000000000bb000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000000000000000000000000000000000000000100000000900000002000000feffffff0000000002000100000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b0000"], 0x140}}, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 13m59.140494306s ago: executing program 38 (id=1058): socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) 13m37.024711152s ago: executing program 39 (id=1106): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000003c0)={0x3, [0x0, 0x0, 0x0]}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000480)={@remote}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 13m1.807159174s ago: executing program 40 (id=1181): socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) 12m58.228620564s ago: executing program 41 (id=1191): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r2, 0x0, 0x0, 0x10002, 0x0, 0x0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000082505a8a44000010203010902"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x5, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x1009, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x4000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1000001, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x5, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xb266, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4000004, 0x5, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0xd4, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x200, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0xfffffff9, 0x80, 0x2, 0xcc53, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x0, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x4, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x5997b008, 0x7fff, 0xffff, 0xe620, 0xfffffffe, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc53a, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x1, 0x1, 0x8feb, 0x6, 0x8, 0x30b1d6b3, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001500)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) syz_open_dev$usbmon(0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) r6 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000000340)=""/113, 0x71}, {0x0}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x8}, 0x4db}], 0x7, 0x0, 0x0) 12m57.296236221s ago: executing program 42 (id=1193): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000123c0)={0x10, 0x1000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x24, 0x0, &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000340)={0x20000001}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="10002cbd7000fbdb03800c000080080003004409000008000100010000000800020000000000400003803c0000803800010006f7c34c916704b46e55be282e10f1ab8a41d38ff4c20922202c38bcbbd67e92798a8ca6b6ca6b7819f072e3680cc177d40b7f088e604f03e990c1c02848ffc35feef8ff0f7f0d674da4a8061b0fee06be0489c354b41f2f8d4b9fbcce8eb9e2e5177852c01fd662bb03cf3c286f9bc249f5f8b2"], 0x74}}, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r9, 0x0}]) sendmsg$AUDIT_TTY_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x2, 0x70bd2d, 0x25dfdbff, {0x1}}, 0x18}}, 0x40800) r10 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r10, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 12m44.217596166s ago: executing program 43 (id=1223): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x9, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x101, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0xfffffffb, 0x1, 0x1, 0x3, 0x2, 0xc, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x6, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x9, 0x2, 0x8, 0x0, 0x1000001, 0xdc3, 0xfffffffd, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x20000010, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x5, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x6, 0x2, 0x5, 0x0, 0x9, 0x9, 0x47, 0x2, 0x2, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x7, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe48, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x800, 0xfffffffd, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xc, 0x2000b, 0x133, 0x6]}, 0x45c) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) readv(0xffffffffffffffff, &(0x7f0000001900), 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@getlink={0x24, 0x12, 0x18efde40b3708357, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}]}, 0x24}}, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x13) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5202) ioctl$TCXONC(r4, 0x540a, 0x2) 12m22.982363814s ago: executing program 44 (id=1257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00', 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 12m5.645137017s ago: executing program 45 (id=1295): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000200)) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001340)=@abs={0x0, 0x0, 0x104e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 12m0.679503782s ago: executing program 46 (id=1308): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = userfaultfd(0x80001) mmap(&(0x7f0000933000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x28040680) timerfd_create(0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x3, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40080) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) syz_open_dev$midi(0x0, 0x4, 0x24000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000342000/0xd000)=nil, &(0x7f00002e9000/0x2000)=nil, 0xd000, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$TCFLSH(r0, 0x4b45, 0x4) 10m18.015731332s ago: executing program 47 (id=1668): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r0 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, r0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307a95d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x28, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x23, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munlockall() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r4, 0x4fffffffffff, 0x1) 9m9.719446636s ago: executing program 48 (id=1832): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) poll(0x0, 0x0, 0x3) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0x6, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0xa, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7e, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x0, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x6, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8020, 0x1, 0x9, 0x7, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x1, 0x3, 0x4, 0x80000002, 0x80000005, 0xff, 0x6, 0xfffff942, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETFILTER(r7, 0x801054db, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x4b, 0x0, &(0x7f00000003c0)) socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_enter(r3, 0x3516, 0xf400, 0x0, 0x0, 0x0) 9m6.804627518s ago: executing program 49 (id=1844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000500), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (fail_nth: 6) 9m0.940926882s ago: executing program 50 (id=1860): bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) gettid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r0, 0x0, 0x10000008ebc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) 8m23.2781471s ago: executing program 51 (id=1951): r0 = socket$kcm(0x10, 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x22041, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r3, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00005a8000/0x3000)=nil, 0x3000, 0x3000004, 0x50, r3, 0x10000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) shutdown(r4, 0x0) unshare(0x40200) r5 = semget(0x1, 0x4, 0x39c) semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r5, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) semctl$SEM_STAT(r5, 0x2501bde63a8d43b8, 0x12, &(0x7f0000000180)=""/202) write(r1, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 8m21.245938676s ago: executing program 52 (id=1957): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x7, 0x7, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, 0x7, 0x8000, 0x7, 0x5}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x7, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x0, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) fanotify_init(0x202, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = signalfd4(r3, &(0x7f0000000340)={[0x7f]}, 0x8, 0x80800) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000380)={0xa28, 0x39565559, 0x3, @stepwise={0x7f, 0x7ff, 0x100, 0x401, 0x7ff, 0x5}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a4, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x1, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x70000000}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 8m14.768992525s ago: executing program 53 (id=1971): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000540), 0x0}, 0x20) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pselect6(0x40, &(0x7f00000000c0)={0x9, 0x200, 0x0, 0x9, 0x1, 0xb3, 0x76, 0x2}, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/50}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071112400000000008510000002000000850000000e00000095000000000000009500a50d00000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc8, &(0x7f00000000c0)=""/200, 0x0, 0x37, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) (async) r4 = socket(0x10, 0x2, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) (async) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) (async) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) (async) close_range(r4, r5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x1010}, 0xc) 8m9.528494036s ago: executing program 2 (id=2001): ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000000804040ec2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x600, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000400)=0x46) 8m5.884688801s ago: executing program 2 (id=2009): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0x3, &(0x7f0000000580)={0xffffffffffff0001, 0x6}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="17bd23e19560798fb41a8775bb6709f7bedad04aa04323ab7c9d0ae4182ebd8db1470d502b8a4f542d95a8b5bffcbc4073e2f752f34c0198288dc5364c8b4d09adc35eea438d0354e5da617c0f0bae72137866cbeae07954b7625cb0362fb779a946ae560b4a129a3fcc08c18e0f077f1627e7b48049a8b02a2c98eb300d1d68882572ad1d56bfefcbc2cb26bb6341bbc94ce5d7c8fbe40d7cb8a5246baa0ce1686b7215ec57640c333aba84fceebaf692e93f8093"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xb, 0x0, &(0x7f0000000900)="e02742e8680d85ff978276", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(&(0x7f00000005c0), 0x7f, 0x16001) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x0, 0xfd, 0x37, 0x40, 0x5}, 0x5, &(0x7f0000000b00)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc1a}}, {0xf3, &(0x7f0000000380)=ANY=[@ANYBLOB="f303af0937f9a23c4736c763a90e1fd49b96961bf567411195cd4b0dec76acd055fb7e24a23d6c9cae7a3b2536d7dca295551427baf00f27792569e900513e824d7cfbcbcf759493091ea5d5f8dae8cb32b3022f8c9bd84e6088329ce2d12c161a9d8795669445c2bc8a473ce10000000000000c8d9ceec024f94b716ac8eedb3eb6f16fdb84006844c27d1263e450805ea1f96513dcde62aef8922485ce29050bb8e265fe7f168733614b39d3f7cc436ff7ba6a3a4b9122c38179e80789d79d0e8e037bb9457656670090f58af5cecf906c7faeffc8bd0be8006551bcdc5895ad99f1a8f50efbee3d1b012d3c46d8e5b69797"]}, {0x7a, &(0x7f0000000480)=@string={0x7a, 0x3, "3a44d8b725dedddfb2fa5307e584d0f7312bb85c1a38a0aa53539d349a4ff7398dfa87d7b9812325636449072f62ca888541d28ee0a276cfa17d022a6ab69148f2f75a2821fd9be8e0972e5184f8dcae2f1e5b27c580df82ace0cbcbcfd4a54724fbc8c528df7e6af5343e78b7c64c4057eef22511673497"}}, {0x94, &(0x7f0000000a40)=@string={0x94, 0x3, "7bd781e2de765d5b72fc85f3440ee156a85a0c796361278b6f38aa9cee4bec8bab79d98bf8af1d189a730fc60a0779f6d0ed080e5f440944f54f6a432930d30cf6ad75a6a0450e483716a2d495e516f56d1a61f65d91249c42d118920bf080d47b69ef5bd12a084a54f87d6c7cecc0088cb0877c39c8d0e7a298db60a639fa88cf1440730091f32cabb8dfc7459b2ba1c53b"}}]}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xe3}, {&(0x7f00000007c0)="1d4ac370cf8c47025bd7a6546c8bd2123991596dfcd1abdb72276d5f80b1d38cedd7d704de6e472fa6961cd700b4f8e0f594861c0296ca9277c9bbf83e11a3ab33449d0e26aa8bcb6c2ef9", 0x4b}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000840)="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", 0x104}, {&(0x7f0000004480)="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", 0xda6}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000000400)="b81660c019f12fa3c75cf910ee43d1e0e31dc694cac57ef2ed5d18704f407c3c167db2b1277da41991752dae935e0dd3e83b6c88bb29824109abf8fb17289bd3cfdff778784902885d95a40ca7b23d38ecb5df329b97b2df238b088d1f7c0bccdf39fc39039f2dd2099cc6751e4fa135759876539553f20f703ec603cc26960f45135ac50612d913faf45d7266c7166acbb61cbb7517e69f3f5c96400ddaa4c0a3d629f0d998f12efad1515427366f9b6e21e019bd667a4ec71b52e3737192024b8288f67924", 0xc6}, {&(0x7f0000003400)="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", 0xec4}], 0x8) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 8m4.430412906s ago: executing program 2 (id=2019): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x1, 0x400, 0xcd, 0x1}, 0x50) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000030c0)="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", 0x8b8}], 0x1, &(0x7f0000001e80)=[@assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @iv={0xc8, 0x117, 0x2, 0xaf, "5bd5fefece2f14dc49a5db3fde5fe60cb29ba3186dac8f0cac40486a4ab677b9c2c9e0684f3fa52276f91a6cfcc6b51e5146bbf1e03ab01d49813225bdaa2b1d2b03e56e079384073d7e10700213247d5ea0ba200cb0efccb705c799bb9d010fbf5e1c4d7771ea138ffeba012e1b704f6010d6408aa9308a7c6a50ef46ba527f14b7c44b7de351a134bb1ff9895edd371b620e4c49e907f95266293bd38e4e8885d3fefd689f597d1db6a4b2dff601"}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}], 0x128, 0x20000001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}], 0x2, 0x800) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 8m3.757032226s ago: executing program 2 (id=2021): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="059900f3ffffff11"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) io_setup(0x6, &(0x7f0000000540)=0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r4 = eventfd(0x7) io_cancel(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7f, r1, &(0x7f0000000200)="c85fc9d6e87de92adcddf17fa08eea70f76ba8f33f5865657b5f08118071b3192d2dc332f4254a390549c9efdd314889923ed953162d7908a161ff60b9f8b0b9763a3dda7b2eb7f9929bd9a29d8c2414342c12f4b86f6335767c15d709b9bc2316c71b103df9ba95447ceaafee5d6567ebf33b6502dc51b3fd370bb0a5320523b5108b73277e9d", 0x87, 0x10000, 0x0, 0x1, r4}, &(0x7f0000000080)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) 8m0.049014832s ago: executing program 2 (id=2028): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) 7m56.872470265s ago: executing program 2 (id=2038): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) poll(0x0, 0x0, 0x3) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r6, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0x6, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0xa, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7e, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x0, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x6, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8020, 0x1, 0x9, 0x7, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x1, 0x3, 0x4, 0x80000002, 0x80000005, 0xff, 0x6, 0xfffff942, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r6, 0x5501) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r9, 0x1, 0x4b, 0x0, &(0x7f00000003c0)) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r10, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0xf400, 0x0, 0x0, 0x0) 7m41.513546659s ago: executing program 54 (id=2038): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) poll(0x0, 0x0, 0x3) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r6, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0x6, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0xa, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7e, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x0, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x6, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8020, 0x1, 0x9, 0x7, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x1, 0x3, 0x4, 0x80000002, 0x80000005, 0xff, 0x6, 0xfffff942, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r6, 0x5501) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r9, 0x1, 0x4b, 0x0, &(0x7f00000003c0)) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r10, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0xf400, 0x0, 0x0, 0x0) 7m39.822866525s ago: executing program 7 (id=2086): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}, 0x0, 0x0, 0x45, 0x0, "3fc91ad3af9423213415a46316b05362ded7610bdcf48bffc7ddcc3aedc4c4cc255e5d8a319e18532e05d4fa2631a28e903f5020c32111a2c25e97746b1013fe634a391ffa1ff51f049942566e2c3841"}, 0xd8) chdir(&(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x532ba931b2ac96c2) ftruncate(r1, 0x82081fc) r2 = open(&(0x7f0000000780)='./bus\x00', 0x1c90bf, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x1010, r2, 0x800000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 7m36.408455297s ago: executing program 7 (id=2094): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x300, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 7m35.217708274s ago: executing program 7 (id=2096): r0 = socket$inet6(0xa, 0x3, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$PIO_SCRNMAP(r5, 0x4b52, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = getpid() tgkill(r1, r6, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x8, &(0x7f00000000c0)=[{0x2, 0x0, 0x5, 0x6}, {0x3, 0x5, 0x2, 0x1008006}, {0x3, 0x2, 0xb6, 0x6}, {0x7fff, 0xff, 0x27}, {0x101, 0xd, 0x5, 0x7}, {0x4, 0x18, 0x80, 0x2}, {0x5, 0x3, 0xe, 0xffff}, {0x7, 0x0, 0x7f, 0x2}]}, 0x10) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') 7m34.237082317s ago: executing program 7 (id=2098): socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x11) 7m34.126236218s ago: executing program 7 (id=2100): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f4", 0x26, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x62}, 0x14) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000080)=0xfffffff8, 0x4) 7m32.736706213s ago: executing program 7 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) utime(&(0x7f0000000240)='./bus\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x4000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) r3 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@nodevmap}, {@version_u}], [{@uid_lt={'uid<', r4}}]}}) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m17.664409564s ago: executing program 55 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) utime(&(0x7f0000000240)='./bus\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x4000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) r3 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@nodevmap}, {@version_u}], [{@uid_lt={'uid<', r4}}]}}) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m56.162267483s ago: executing program 0 (id=2386): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000210400020000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128046000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r5, @ANYRES16=r0], 0x50}}, 0x2) sendmsg(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102385, 0x18ff1) creat(&(0x7f0000000740)='./file0\x00', 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) socket(0x10, 0x3, 0x0) 5m54.012935367s ago: executing program 0 (id=2391): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sg(0x0, 0x6f5e, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44841}, 0x2000c010) close(r2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa9b1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x244880) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = msgget(0x0, 0x40) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r7, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) msgctl$MSG_INFO(r6, 0xc, &(0x7f00000000c0)=""/173) 5m52.887663904s ago: executing program 0 (id=2395): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400a20000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fremovexattr(r1, &(0x7f0000000100)=@known='system.sockprotoname\x00') r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x6, 0x3, 0x2, 0x8, 0xcc9, 0xf, 0x7, 0x25, 0xd55c, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x9d, 0x8000caa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r3, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff830000580065159385e7"], 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@broadcast, @dev, @void, {@arp={0x806, @generic={0x2, 0x1a, 0x6, 0x0, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, "", @local, "91714673c45e4244"}}}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r7, 0x4b4c, &(0x7f0000000080)) 5m49.724985363s ago: executing program 0 (id=2402): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x3, {{0x2}}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4, @ANYBLOB="7d01951326", @ANYRESHEX=r2, @ANYRES8=r0], 0x48}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r7, @ANYRES32, @ANYRES16=r6, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) 5m47.348201263s ago: executing program 0 (id=2410): remap_file_pages(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x0, 0xc4, 0x20) r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) syz_usb_connect$uac1(0x1, 0xe4, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x6, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0x1, "15de3611433c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x1, 0x9, "dbb2", "82"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x1, 0x6, "8f00793e700a6f03e3"}, @as_header={0x7, 0x24, 0x1, 0xa9, 0x0, 0x4}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7f, 0x7, 0x7f, "c50bff2b12c0944f96"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xfa, 0x6, 0xa6, {0x7, 0x25, 0x1, 0x80, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x3, 0x8, 0xd, "88092560afbb597f"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xe, 0x1002}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x9, 0x9, 'Cy', "85d3"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x1, 0xb, 0x2, "29af483b3ce2dd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x4, 0xfc, {0x7, 0x25, 0x1, 0x0, 0x6, 0x5}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xfd, 0x6, 0xae, 0x10, 0xc}, 0xb, &(0x7f00000001c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x4d, &(0x7f0000000200)=@string={0x4d, 0x3, "688ce952b16bb75d63ec88ed93bdfc602cf08d9084be0b9e3480d796523d9db3ceba8f0ed3e687d494d4fabaa1dd4d0bac58f0c79c67f17fd83bb79cccf63be6116210b229b7b930c6889d"}}]}) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(r4, 0x5450) 5m47.084913687s ago: executing program 0 (id=2412): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000200d0501320000000000010d02240001000060b109040000010300010035c2e3319f7239340009058103ff030c0003c59ef8e82df121811d0dce6ff288affbdeb26c54a7501d74663bc466783083e719bcc146ef1e51ca4af2e76ea0f77aa7d3eed7bc67c2aba633455042d64ab18cc36ba26d3030fd38ed2f466bf7f4ced2"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280060002000120"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x3, &(0x7f0000000280)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 5m46.767709633s ago: executing program 56 (id=2412): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000200d0501320000000000010d02240001000060b109040000010300010035c2e3319f7239340009058103ff030c0003c59ef8e82df121811d0dce6ff288affbdeb26c54a7501d74663bc466783083e719bcc146ef1e51ca4af2e76ea0f77aa7d3eed7bc67c2aba633455042d64ab18cc36ba26d3030fd38ed2f466bf7f4ced2"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280060002000120"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x3, &(0x7f0000000280)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 3m23.382674539s ago: executing program 9 (id=3279): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 3m21.638389093s ago: executing program 9 (id=3281): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = memfd_secret(0x80000) syz_clone(0x242ec00, &(0x7f0000000340)="3e7a141eec36bab6b1c60b5b83ab92b81f48aae822fe1b03a1cc9687dfe9ddb36f6b8d98f34c9b342f2b109071f89ae4df99c422b348a294955c3c737e8a308561971ffd7ed3fdac822f5897168130c60eda8e25fe8bf8307665b0316db03b3fa8d3039ab27e71d0953ed51b732a5cd3b966e3b047ff9f1649c0be872694861d2c99c0d738363da0028b507a648e", 0x8e, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000780)="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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="7cbb0001020603000000000000050000060000000000001a000900020073797a31000600000400078012e92d32fa01df82020000000500050007000000777238b329452f866a1142ffdaa471c8656b31a16083e5ea60cf5f7fab26bc9ccfb4f3ba301180d65a00fe9b64baebbe99086a7283bc3adc7f3bab19ee4646577db24fff8e846f19095bdb"], 0x44}}, 0x20004000) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x18) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x2, r7}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r5, 0x8, r8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 3m19.257490143s ago: executing program 9 (id=3293): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 3m18.417775405s ago: executing program 9 (id=3296): unshare(0x8030180) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0x206d33, 0x10000, 0x2, 0x5e}) prctl$PR_SCHED_CORE(0x27, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="0a000000010001", 0x7) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x8) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getpeername$tipc(r3, &(0x7f00000000c0)=@id, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 3m17.754258594s ago: executing program 9 (id=3304): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b02, 0x0) 3m16.897143845s ago: executing program 9 (id=3308): socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x104}, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x73, 0xff7ef001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x1, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "72657eb3097c889f"}, 0x6}}]}, 0x2c}}, 0x20008030) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x5}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3101) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0xc0505350, &(0x7f0000000940)) 3m1.412706986s ago: executing program 57 (id=3308): socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x104}, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x73, 0xff7ef001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x1, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "72657eb3097c889f"}, 0x6}}]}, 0x2c}}, 0x20008030) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x5}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3101) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0xc0505350, &(0x7f0000000940)) 1m49.766299146s ago: executing program 6 (id=3551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c00", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="7c0033008000de0008021100000008021100000050505050505060000101000000000000020002c500000107481209e0"], 0x9c}, 0x1, 0x0, 0x0, 0x24000880}, 0x20040010) 1m49.602700599s ago: executing program 6 (id=3552): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601"], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce07020000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r4, r4}, &(0x7f0000000500)=""/93, 0x5d, 0x0) 1m49.131898293s ago: executing program 6 (id=3556): socket$inet(0xa, 0x801, 0x84) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 1m48.847629181s ago: executing program 6 (id=3558): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x7, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) sched_setaffinity(r1, 0x6, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000019300)={0x8000, 0x0, 0x3, 0x6, 0x8, "89584712ea3c0971"}) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000140)='g') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x18) r8 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x4000000}}) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) 1m44.727885081s ago: executing program 6 (id=3570): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b00)=""/111, 0x6f}], 0x1}, 0x100) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="55b69a04de68c3e21533a90f73b2ed6fff", 0x11}, {&(0x7f0000000780)="fe679a32d734906de8e3731b113d5053cc8bbdb9ab5285b3d5041c489c6c15a5f6024427bad2af422c24d910ede72123b70eb98903a88726b0a3a3b9b25dcac3980474f049c4f461158cf9e05d7f65c53b0f219b2c1d9b0e2449fea5e7dcb671e06236518e8702", 0x67}], 0x2, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x20000000}], 0x1, 0x0) 1m44.345490013s ago: executing program 6 (id=3574): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000540)=""/15, 0x2}, 0x20) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@ipmr_getroute={0x1c, 0x1a, 0x2, 0x70bd26, 0x25dfdbfd, {0x80, 0x14, 0x14, 0x80, 0xfd, 0x1, 0x0, 0x4, 0x600}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r7) socket$alg(0x26, 0x5, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x200000c5, &(0x7f00000001c0)={0xa, 0xfffe, 0x396, @empty}, 0x1c) close(0x3) fanotify_init(0x200, 0x0) memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00My0:\xc3\xad&\xbe\xa4\xd8\x9b\x96@r\x8c\xdc\xc0/j\x8f\x01(p\xbf\x9f\x8c=Q\x06\xa2\x99\xb7\x03?\xebX\xa6\x9d\x8e\xee\x16\xb7Zg\x87\xa3\x93mrEn\xda\xb7\xa1I#\x9eT\xab;\x16\x86\xed[\f\xf2P\x06\x8cjL\x12_0$ \x97)\xaf\x9b3\x06A\xa6A\xca\xd7\xcd\x02R\x8d\xe7\xcd\xee\x96\xac\x16\x0f\x1a\xfc\xca\x15\xf6`V\xa7\xe2R\x9e\xe3\xb4:\xadr\xd1>>*\xac\xabHt\xe3\xbf', 0x5) open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x36) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x181000, 0x0) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r8) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0xe1, 0x8001, 0xff, 0x66a0, 0x6, 0xe6, 0x5}, 0x0) 1m29.260161448s ago: executing program 58 (id=3574): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000540)=""/15, 0x2}, 0x20) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@ipmr_getroute={0x1c, 0x1a, 0x2, 0x70bd26, 0x25dfdbfd, {0x80, 0x14, 0x14, 0x80, 0xfd, 0x1, 0x0, 0x4, 0x600}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r7) socket$alg(0x26, 0x5, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x200000c5, &(0x7f00000001c0)={0xa, 0xfffe, 0x396, @empty}, 0x1c) close(0x3) fanotify_init(0x200, 0x0) memfd_create(&(0x7f00000003c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00My0:\xc3\xad&\xbe\xa4\xd8\x9b\x96@r\x8c\xdc\xc0/j\x8f\x01(p\xbf\x9f\x8c=Q\x06\xa2\x99\xb7\x03?\xebX\xa6\x9d\x8e\xee\x16\xb7Zg\x87\xa3\x93mrEn\xda\xb7\xa1I#\x9eT\xab;\x16\x86\xed[\f\xf2P\x06\x8cjL\x12_0$ \x97)\xaf\x9b3\x06A\xa6A\xca\xd7\xcd\x02R\x8d\xe7\xcd\xee\x96\xac\x16\x0f\x1a\xfc\xca\x15\xf6`V\xa7\xe2R\x9e\xe3\xb4:\xadr\xd1>>*\xac\xabHt\xe3\xbf', 0x5) open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x36) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x181000, 0x0) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r8) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0xe1, 0x8001, 0xff, 0x66a0, 0x6, 0xe6, 0x5}, 0x0) 21.021162269s ago: executing program 1 (id=3744): write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000006c0)='./file0\x00', 0x206080, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0x80049370, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRESHEX=r0], 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone3(&(0x7f00000004c0)={0x11010280, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x36}, &(0x7f0000001100)=""/4096, 0x1000, &(0x7f00000003c0)=""/199, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000600)={r6, r7, 0xffffffffffffffff}, 0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x1, 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000640)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000680)={0xfffb, 0x20d, 0x8, 0x7, r8}, 0x10) quotactl_fd$Q_GETFMT(r3, 0x3, r7, &(0x7f00000004c0)) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="200cd3a56c49"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f0000000280)={0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="4006000000001602964c6e4be728e3348fc9041fc12113b7523c3a561b40eaac1e22d41aae9c0869bc7db1f83970dbb5d1834ab9e84b637591adcdb6e7bae5d6bef9ec18ff074c23bf174c5e2580f347b28998255c4761e8085f"], &(0x7f0000000180)=ANY=[@ANYBLOB="ff1d3b0000000685bec4d2d0453b03c5bd640f8700523e3393526d22876e578275200de4d53253eb7c506c4eb0aa1fe1b27abb566251889c798f4125b1fb8503"]}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="2016c1321ffc7a050000000000"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)=ANY=[@ANYBLOB="20001000002819e725f73fa28d973a7666a9f151ae81"], &(0x7f0000000400)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x3}}) getsockopt(0xffffffffffffffff, 0x0, 0x46f, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 17.225784146s ago: executing program 1 (id=3752): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) unshare(0x28040680) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2b, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0x6}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xe, 0x6, 0x1, 0x3fa}, 0x1ff, 0x0, 0xffff5b6b, 0x7ff, 0x17e2, 0x1a, 0x1b, 0xe, 0x6, 0x9, {0x3, 0x8, 0x8, 0xfffffff7, 0x7ff, 0x1c0}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="00000004c486fc025c6302b8000000", @ANYRES32=0x0, @ANYBLOB], 0x50) 14.409400023s ago: executing program 3 (id=3754): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24004815, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 12.213826925s ago: executing program 5 (id=3758): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0xb, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18b665aa05e37692e10000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000009f7f00000000000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000180)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000a00000004000000", @ANYRES32, @ANYBLOB="00308c0300000004000000000000000011bcbc0ba407e2bcfe21ba9ef9d10ab43bc794fa72087fa8ead85f1536dbe9c754232e73055a601638ba730e15974d949d5d30bf58d386bd7deccd349c1392e5d0deb609c35b8df244dbbe93c2c71f15ada03e2cf29bffc8bd37cdb74d73d1f903216459a2f700c17854a035aee2f3e08bb16b1faf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x3f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, &(0x7f0000000300), &(0x7f00000005c0)=""/104}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000240)=0xffe, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r6, &(0x7f00000004c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x4080000) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000040)=0x2, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x2, 0x3, 0x100000001) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) 10.608980938s ago: executing program 8 (id=3759): syz_open_dev$dri(&(0x7f0000000080), 0x100000003, 0x4200) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r1 = syz_io_uring_setup(0x27ed, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x290}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xd762, 0x100, 0x0, 0x134, 0x0, r1}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4820}, 0x40005) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf280f000000040007802400078008000200070000000c0003"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(0x0, 0x0, 0x3, r4, r4) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, 0x0) kcmp(0x0, 0x0, 0x6, r4, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r8, @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000440)={0x50, 0x0, r11, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 10.268836501s ago: executing program 5 (id=3760): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r1 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r1, r2, r2}, &(0x7f0000000500)=""/93, 0x5d, 0x0) 10.18179245s ago: executing program 4 (id=3761): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6gretap0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 64) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x50, 0x2, 0x0, 0x7}, {0x6, 0x60}]}) (async, rerun: 64) write$ppp(r4, &(0x7f0000000580)='Di', 0x2) (async, rerun: 64) r5 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r5) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34a1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) 10.165596513s ago: executing program 5 (id=3762): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x4f37, 0x7, 0x10002, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x5, 0x3, 0x1, 0x1, 0x1, 0xe896cef, 0x101, 0x4, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x1, 0x1000, 0x7ff, 0xe69, 0x3d, 0x8, 0x6, 0x0, 0xfffffff8]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) ioctl$COMEDI_SETRSUBD(r0, 0x6410) 9.961163198s ago: executing program 4 (id=3763): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r1 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000180)=0x1, 0xb, 0x0, &(0x7f0000000280)={r2, r3+60000000}, &(0x7f00000002c0)=0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x8) listen(r4, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) 9.757827388s ago: executing program 5 (id=3764): timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') futimesat(r4, &(0x7f0000000080)='./mnt\x00', 0x0) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000001400)=0x3d70, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) 8.392202203s ago: executing program 1 (id=3765): sched_setscheduler(0x0, 0x1, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/121) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000f, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x9524}, [@call={0x85, 0x0, 0x0, 0x88}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x40001, &(0x7f0000000100)={0x2, 0x4e27, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f000000e280), 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0x7b9, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) 8.305285833s ago: executing program 8 (id=3766): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=r3]) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) 8.1939683s ago: executing program 8 (id=3767): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, &(0x7f0000003000)=0xc) r4 = syz_open_procfs$userns(0x0, &(0x7f0000003040)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000044c0)=0x0) r6 = geteuid() r7 = getgid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004500)={'\x00', 0x38, 0x5, 0x6, 0x6, 0x5}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r8, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r8, &(0x7f0000000040)={0x18, 0x0, r9, {0x4}}, 0x18) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x2000000000000005, 0xffbffffffffffffc, 0x0, 0x0, 0x10000000, {0x2, 0xd08, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x1, 0x6000, 0x10000, r10, 0x0, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000048c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r12, 0x3b82, &(0x7f0000000000)={0x18, r13, 0x1, 0x0, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}]}) ioctl$IOMMU_IOAS_MAP(r12, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r13, 0x0, &(0x7f0000000240)='7', 0x1, 0xfffffffffffff801}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000004900)={0x6, 0x7b5, 0x2, 0x0, 0xffffffffffffffff}) r15 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x23, 0x2, 0xa4d1, &(0x7f0000004940)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000280)="538c00005760dbded13c9e542c021dbd4834e45c48889ebdb935fdda12deca4104dbb0e763e745437b212a55f96ab8e8f624512c1caf7c0ddfb0ea15d042ae987fe1549dbdde20ccbf7530c736cb2e814631016818527fd9211075b680f82a53e255349b1db3c76e11f83a37c3c240c547164f626c712fe7cdaa4b2c9e54dabe5b616ea418d9a028864bda5a09b4", 0x8e}, {&(0x7f00000001c0)="c3ee6eee84fdcf3050865cc45a51caf1ab6654db3a3691b17f7285951fd1dae8a1f8a974989918e983419a6163266d7f77b1de3a24c782cb195e9bb02d05efa8ea511d84cc23eb13a17cfdd0980178f2d8e422e495e6d12d5f6eb57ab75dc8d223ebcb791771f8a6659b", 0x6a}, {&(0x7f0000000340)="5c4b8244b7a42d3559b5210a489579e82d2e04eefc4b885eb840cc3fa2ec36c0c0d83829cb68e4b7fc854bdc1a2a23eb0d4310a48dfc0735d9faaee4b45711714d6b8804c6e053ede0ae55e201910a13b24675a12732532d543389cbbb9be4d4fb9fb4ded29548fbf08fa7d7f42acd33b97f8f", 0x73}, {&(0x7f00000003c0)="d8a136b4d85fc2c2b79f16f65951e988866028fb41180d6c2b0ecb6a77ab8f5a9ea7eded7cbaa77644fb4c9b98747c2f529213f67893f9405a93ee84f129e765373eb74f28865ff1298242cc236de30ccd764a0f0dabd6f5970ec2f80f6643a8dfb5f7775552e26f5927bc94e5fdf30bc2aaf943a8b57cf6f6717385b1227da60103ef979959e1896866013b1cbc1f6a8a1655007e3cc1f7b38c92c1cd8173fec17bc258d7a09c0e39b2d05863be0cffe337353599fe1946670ae6ca3702c22b2ba9d83f0ca4349a85967b674e7d6ade66d972ff08", 0xd5}, {&(0x7f00000004c0)="abd3e432d187b8214ce7cfdfd2a4349794a4a105d276a27e922e0c256f271fe89e019144d3993b1b1ee6b8a9c4a5b107099775be5a3fd7f3bc1ee5b1d502b4bb2c70870d1aab7d0637036d07ab2c2edeaedaa74a4bcb48", 0x57}, {&(0x7f0000000540)="73ac62ad82de42727d92cc9add9582d26c3407ed497a3885e6d1da26c40418ffadc84762be22b469488ae272cf507dfc5e18ba59d8754972cc1d5a7e0b5b8280de7ec32fadec2319fc2658d36ce290c07a29932f124150473b6530187659e03894a1170cdf77a93941eadd14659303232f3f84bfd6225bdafa12397f60ad2289fd8e71363b4c3c3ea17943b5db90cb062349d616fbeade6982d8a31c25a7c0127b069e7b59ae51e25f4d8b3948e3f6d8d21965a4dbf0cb071f6677892ce557", 0xbf}, {&(0x7f0000000600)="ea1a39ae80c1d2a5f3cec12bdd4a6fd865121355a85edac96d9f011fd21b6c0386ded0d5f316db8663e73bde2995199496895ac62d7adb0f11e18bd1f318b1c3eaadbd39f160201ceb73fd9c7a8df3fc781e4867b23e1232719f3025917361130cfc1817aef20475c06bfb9da64eb48528092576c2cb60a1dbccfb56b0a6f79f31c7c5048315dc44c9e9d8a903706d5a396aa6f1e76fb5959bd503bf74a3b7f2bc8d6f6dd43fcc2d8e177dae979887bd2876fe08f9ec066457c121320a4e333deb5ab46e301ed30a787c2840631a0052e153a59474f8d3877737c09e3bc44acbff530cf15b52ee33fb21c226aab0aa1560", 0xf1}, {&(0x7f0000000700)="15531e7c0aaaa4d3fa4cd95055279c8f7d5ec8ede8eb87ee611afe749187287361511a366300cea463137f09d67e597b608f2911cc30ca2dc9ab5b79a7ba79556c6e7d2903cdc6a2b89c9521cb81e1059a11adad97ca03d7b9c3f884671f4552dd9266f3928ef190cb86b362249706e6694482e6cbacba4e0c491d26b9bd0421af23b05fb5975eb8bc8b008988ddc451e649d97b4c59d233591daea3cb5fa573de2a5f280f11361169761ccf07bb49e9636402822f786b8691e0d7bee00608a7f2bb", 0xc2}, {&(0x7f0000000800)="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", 0x1000}], 0x9, &(0x7f0000003080)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0xe8, 0x20004045}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000003180)="93a896213645aca21e6764d083f6136500850300c929eb39132d62d3439bc7d2f6a0f92d791787810b31f7e7e1ef0604389b68afd89dbd7c043b6776bcf8afb66d447435fc4472b1ebfcdd8631140df91f8a66b4bcea", 0x56}, {&(0x7f0000003200)="622c2854fb7e20d262e03948ca0ce0232c2a5e87692a1c990e399cfbcb691aabb2a0022d0542b651d49676cf17d1105baa6026542a10d31303f9955976d36b4b17c896780a84b0d40a7a41a8136cad8f3e5d19046104e5ffaf6170ceb1c34ca34a55d7e4697fc6d8ce385345fd327ffccc875bea82ebb9126b787699e06d79a899ebf2605ff8882d4f98a4d3e0e99c607f09624c4aed78b3a8cbba421a49058825fcdb35a977c5bba3faae64e52919002674d056ea4254bd1374a7c62ee5da40c08fd43a449d10dbda2485d39501b9a8fd312b3a534758349b5699a69bacb5a6dfd9faad581caac8c375ef041275c05bdc3745fdc354b6dc452e4d9578da5a1a13bf21c91a418764db1b4e61569941a95fd93ece234cf6d8f1056c240854498cb5dcaf7a3b826c1b73713e73fab3c06ae00ee0f618503e709fb353591a10b1e4caa8e0c401116d43c1dc1a7f8da8188bbf8eb7be380cda4bf135ef6a1d8120180a4d01a4e33bf70a0e6bcfff87c04f7eeff77b84c7e7223bad0c0c6d5ed801555e3fb188ee9d511d0d60c81d600e3ab0f36fdffaf10491744bc2c36a8aedf61008f4ab68537f93a5e31a4f8fbff1b08cecef7e6ca02eb38e55df45eedad83e1a89a2a42e780a60f35fc1e36499efd1ed63426f965dd19f33b194054e493a2d4e6df7a9b23c70b6f2c7785645caf699c1422fe055b55411d5e02582f87e4d669a61bc5e5a2319e75f72666493411af8c17fe34217dc80410c68dce4784c8fad6e0b331dda96f64296d21f7e83ab8a607b839cbd9f803fba0883224adb3077b7fcd157cbd9a5cebe83e4d5b098cccbfcadc251d9f5d1fb31f8aa7699049ba1c67bb7e7e2b33d58de3c2c2a7dba76fea44d4269d46bceffd40543ab679a69a26b021ff22480c67e39f7d224dc233f6f34acb58494dc98c1b15416a2ba3ef1cb5951788ae8e97fa1d89bee8c6bd6d6377d346d22f80d6d397f420654e900530b95fae1c3d4e7ec660682c6a825432159d50aa1e48c2619311dcb6bd55bc4d213986ad856a3ce8ee5feefcb5667e538e69bac57d043f3a0b5245ebe82bb718ed07fbebe1e658acc7a10b5cf8f896822984d8c0e3213499d78d6fad4192d93791c5bb851531d87b4ec5b1c31edb079790538aaa0376e7022ef2adeec6bc5192f613040547e4916bb2b087e7e72275c51f1d3943317548e2d5caa04b1316a287226e50f6ce31af436595f0d13f8d7ef9edd4b2555f6b606ff3331d041984f850fc08b5929f2e310ee3b1a4877821e624e2a0d4c11ffe83cd105eed8aa267df634f054ff54964996ed06047231312248e7095719df304820f559edc9d0def68958f74f88816ec6dc4864438daed65471c1a38a84f25c479bcf0fa2b38ed316841b22af334a536c7bc46b4e2a2c34f2bbd30cc38bdab75095d2205949b18fc0f1d22ff7a3a003389673335a07790e127a633f5c6bae3c8a05b880086694157d634160b2d72fb3608b54fd6b36bcb77ec7834a09bffbc0e97a58541f0db0363cfab4a654a6a149e9aae1d8e1f15743b08f10c923737035d4ff6bcd00e8a3006aa5aab88b3451927278a815bc1d6a16c5ac436be764f3aefaf6757766c8e9f770247f4b4c565872d14cfc42ca03f0c01bfa0f6f3c0ff5e7916450a9439d6ac15e4fda0626dfa3dcd98d0b9089d2ad5bbf49c1309e16502e8b1b911ffeaee8ca35bee9ad850f00c2e38678d49619f44e996d87fc4492f156da95db1d6987381571be142da5a97717dd0e19080674d76bf655f350ce64b8df2f043d75bf65cde673e3872c5e3c15c2a0d036abbc48d51d6697294f6464c69910a5cff275615c620f6686f8393d2e8224766bbf02cf0eb9589ebd166a54bbbcda7abd72c8d70b187c51da1bb4e1159f8f78605743eb64181b74e14f53ac76e43d8a5f0637a07412b53f608f87e191d5bfa0797c82d0772c698d3df8459a6664dc0ff17f10903798a93ec89f2338b71036afe2d19497b59a71ea2ab7f5ed8dc6e3f33b2721b66eb5da4b5b40af918d3ffd4d8f5827c110911db041ad9a5af6f86b07eab6943b041783316fa7400afa6a23c274f12c12a7c0bad49b35d3da06b6c8e3b9aaa5d8b143d3a82e13566d85d567c8d0f665e1095778bfe82179b7a95f53af1408e1b19b54612a46484f23fb02751d0b42e8f096ef2e5beddf463d6c5ee2962923758c27cca6be8e79d7e5d38c75580913802337b0d4d009117d2c9a761ef3850d7291a2253d73c16c49b5a727379ee50c9cf40cfed34f5e9ea78e9966346298b9a1f47a240aeea3d8f3f4afae7bb0bdba0eb0ae878d187ebcfb351d1bda772182e217e5f590aaedf0cf744dc7ef300c5cb5cd48b5602d88d15e1ff9a18b8e0302de44cdf29426907e5e97367771c5cb1d1878fa1f45ea147eb320c6613e691b9041cac27b37c868cce2ebec6970141ca6d3ff51c9c3c79d570b33b9f560983adab9160918e4391fe88b2c4dd703c52683ad9598cd3ee3176a224c541739b8711493d0a268a752c50e001c9482ed5f3f9dda8f0c5a9e235ae45fa051861d063d09f0d1bbccad180872ee460050e45b6bbf3d69dbc03a2ebad20cc93cad225176739ab939a96ee8fdafbaf443788437fc8c824afc997a31c48fd00294d72c7414a4716adb7fe25b7cbcdabc5039366a0d54027711e1bb333d073cb98dbf544aa3331b6a13beed1310b8fa2ab8419245362452f0d03d934dc058448b302741aca3d534c1e5c4073b483db374be8819ebe646ee425de8667575e42ad47c7402d1cb03be8d8ab05ea67a9c5f45f58502b8e59d60b8f72b0875c0ae664950c97862932c370a98fb078c67c18fc344f0a44369ce716fb07b020ef115d519f230ca3eec473a1c4b72199a24c7fbb08b5264c91098d6a462c018e8ff6068f714ff8ad715d4d8dfa6908c0dca9aef590a744991f7691b989175a0494ddb4df4fdc9339e051197efadae6869411140919fa475f347db54a411b269570a766664539727983fdd3d1d9e5ec3c17913b3cc0409f437b6fc95085909dacf3ac2fa471b33d0608e83e12a44b89f4aac15ed0f4603185e5e2357531ae88ef6248ee494a0d6341853a9b5f5150eb155b90a0decb368c627b940c941bfb81365d9efcc4cdaf2eab1a5873b696767d70a4e69d8d983f724c08bd9b46d1417c8dd6275d27d61cffd243ac7b446ad87d5f5659022b4103ffa85bf48f97fc0f828905dc6e08964d07ea74548133e6144a1928c4fac0c9164f5965c05bf353b915d2d19d8e7c111cabc805a5163981f998881b5e24c55608513a67ee8d42aa86a582964d6cea84e6b0c836bb07f25b075aebf31d9079acb008f5922b3a630bceb9280d3635d95a8d95ce708dbabf70db8042e650a93fbe741f667361a6c4a773d811ea5d8b3045321103141a7cd50d50622e3422808fa97008e3c1fccedbcea7ee6591cb8df2abd69558ed1f9dd91fd89d08ca6df82270c250e31a4d5f3b28e903f75e48a0ca2c3dfdddacc2aaaa5c0a1139021b4ac1d86115df806a8fe4c4a239b14128a236699d842c8f3a743c82b012bd9965c9f8bbef31534488db8858341d5964daa1b53db52ec9d5af30ade44c73371ce113a9e117dbc65ed348b7027c8ba1777b72428819335c0991a934ae59937d8ca791ddd471482a11dbb0a5bc3280f492f1c2b9c1ed9e7a7d3b5f36c25b0f7bfeaf4991298f3ae7651dd2030a1b284a0d507f2faca963f7ba05dcff2a3d586b647ce13e9e80da26d80de800db725a1048fce02a8fa71190b3b0ef913da034a4cb99432be799cb2079b5d405ec575506fbf901d06c3cb9f944db7bb9a6b53e7276a5d4a7ece335d9d69269eee4366e0db030d43d6be34be4d0ee1f292105251b989985611acb71793d6613303ae9b714e521bfcc8505771ec7be8d24204e96d482a009a6a69b136a0eb4bfa5eb0b9f84f677af14061f30b69defe82ce9335968ea05b96cebba17aa5dd2434c997582c0d619a5d1591fc2f61ec289df2d8ffd309814f90a820a553c19a4e87a761ae779a4d9cf67eac4439bd68d201b7e3991d75da51d03cdc185fa6f0cc35b3644e415485ca7dfde2179af4be641c8175424511ef8114835fc02c9b8160920a8300039f8e2f9025b3a48dfdbee3769fa740a657e6db23632d0e1897f40f38a17e322daf22873d8129851f1eb81b83f0d474358149c72ae9065224c148f3e87786fed3bb8bc8f2f2572b1a6578151daba7489446e596082b17b59bf4687b2b6acf9270f7923d9ca933bce9593ba4b1080ad17fb4775b1693c8df9391b868a4bdc1eb438a01092b57d3bf40089ac9dcf7e881469f2feaa2fe666f24b03ed1b0115ed3ab7b18adfe59ae987c46d087c9f56babe84ec10db7e426eff4350aeb75e7157413e694a4b52980626e4768de16b2a98c880df7ed27b472c279814b215785f9b82f6b1ff5a4ac8ec8b5b99afaab797b98bf0f66bf698e7b9e7d882849d5434a305abcc814aa95179581c6b514aa78a4bbd9ce18ac0cd73a3545abb8c93e3ac8b68ad5731177423d15b5eb4de77c5e5275f217a3bb99d674d7fb71fbd84b24a358140a893bc2f58045cec51f17e68b4d0cb41b8a9fb1da00fa989a43f922d5d0494d2314e83e039c30c1d703618f066d1ade298cc4fc1545e5c484b67b03777d5a413f449461da5e6774e04973031010a912aee74b88fa8b305caa2e38b7205dc95c49ac72c0613224bd33913164c163b08c34136fbfab11c62c52a7038b7891dcf93a6abed6083b98db701edc2e7ad083bc3ee62e0e1fdbb6035992633dc66ca1dcf088e92e89a87e2b5780cdefebba8f46d0c7b5c4604e086e93decfc343d1a8a520a9c4d5fb8baa006ab1c53bae421d39db0c59bcca3b6b561b143cbb0b261c55276b0e2ab91c73f3ae7dba8021d3e52b6427444e535a9cbca6b7829be1ac93ca77e220b97cee0fccbad6175ac066e96a048c9dbf21b6ace05025b1226a8c51ab434b1ac4647f8ef7577eb998c91577a033ff384b6c12b4c7b5e73c030d399bc900b0c945259b65047d9f396cd7ebb3dc8a066f7e672d8329bcd431eb890ee4649e76d93edf25a596d5bf4ce35f69f20f42dfb59ed816ce1925afbd9b3353d4a71e72af18f268fa1f67f7590b95491191709580519ee7ce2994d9c399f065130dbd481286e2de1bbe9d236f5a2548b2410bda2ae794f9cd2e6a2931df4dbf660a5f7ec60f72f8ca4f3e1ba7c52fefb9f6672e61a8fcea80e00a5527ac51225603cd80c1833c2ca9b2bef92bef6598ae294d1593c39d7c96f53ecfd53f79d903514a59ccf1dc1c105657a063fb17796ca230374baf341a6b97f403ab5ba4f0c1a533183632d7b737739664cf2ac7256620c3ef57f2ff9ac539b020bdf460809f4d1445777a8882c8a0159d639b55832bb26cbc4aa0bafd97d6ff56eb5e0f3000be65c5c965feadfc4848d4babd3996c3ffef3d27b43ed9be40d9cee122b4a8b616242a1eb93b08d7a51c873fc3094e31fd33e36ec55ed82c7fd6e3fad089f08a50d605f75ab0065bae7208ddd3aa9978c1f409d00c11133bc5edd5da8fb8eea4fbee7e9b8c1ab9b601c09b8df243fe4b9b1ece3d712039241df641a620560be8f460250469e394c6f1fee784a27dd5df95eafc8fe05ef22f03452136f25b07759eb236431c6c1ba7ee760cbfc1fa0920d419001e2c3fe58aa4342664a7cdc01f8c4cf40c463bdf1bd549ba3f5a9ec22a9db18cd4006d420d5388d220db50e47b8d8bd21a110f738d73b76aa1dfc846ab03755994cbd5", 0x1000}, {&(0x7f0000004200)="5897394447e94da3958d75c68ec9c951ac17b1abc5f89b044a0385eb1bab8d4c6efaf6254a8b41064a0a028c34cdd115be9367ab372b49ea165d768bcbefd08d8c598b4cfca41732aefd289460c3dcaa1f104fd2bc3dcc145645835e8833301783a4f366e18efe1638ce47af32b7", 0x6e}, {&(0x7f0000004280)="3ab83af9abfee6dba31c73a2e8d2dcb07d37c14617a66a0dcde62fd91b598c14504d3c69679d5989e177a350b2be5acac181740790e29dddfc8272bf7ab1cc26b47c5c3a0e488079dd1dd816394a1217a7eb0d8060137f52df0f90250a35c9bfdcec939686b686baae9d0831bbc0252b7067917df5c6f71d730f102d16f4cb4cb3c18574", 0x84}, {&(0x7f0000004340)="a21e95b78da668cc438daa1bb8cc98f65d414a70e7e67a960fbb9251beb38c7edae03daae1fa61be555873559c869ece1d80355ca2521e23b03d24be4bb0ab05f5a2fc0126f90682357b87c82bd7785d308dd7fe0e9390e52aeff4e1d0285784eff99ee392f89adc000a6e5f03bdfb32da1fab820b847c79eb3e622dfca58dee545f838689f0f782df665c6ce2afc22211fa5d577b7a8eef64ef41410f7815da4d7c934407069a2f700f20d72cf4b7735f803c27aaac613162a7952b0e8052d7a6ae099485fa409f", 0xc8}], 0x5, &(0x7f0000004580)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r10, 0xffffffffffffffff}}}], 0x40, 0x20000001}}, {{&(0x7f00000045c0)=@abs={0x0, 0x0, 0xfffff201}, 0x6e, &(0x7f0000004880)=[{&(0x7f0000004640)="9b1b77551d7c565b08dc5039190ca07faacecf05fa4dcc7d203151a4274b1371879cc07e71a520e121a2e6f872f6c15555dab56fbeb502b8a7be43e0d5f8f7d38a1deb9157ea4583954305af88f94f9a411e47abefef387a5b245183fc3b6b2b4c0ff1cffb05293103c6fb7cf1361b2c09955f925e5520b6c7c31e2435e5198d019a7abaff4a4f862094963327b54414dc71a7e7736fa3cf26fac2c9f5de19dec7f24ad7105dd47018e2f9b6ff0a24b6193ce91019068069ce0f8bea176e827c2910dde83d6291e40936ef49a20ea62881925ba37d86a9ea76dcee0a8fc47ba15e57bf4abc38050b02f55b80cf7fba2bab8137bb45a1377d2a3b", 0xfa}, {&(0x7f0000004740)="a9819a88c5ec1a0e22462ca87c6399248f3e", 0x12}, {&(0x7f0000004780)="c9305d54c704408a1bbc6ae78aee90ae4801fa1666eb19e1f6a113aeb734529c4d69a2e4aeb7b8b2064305d0c9c8a2135cb2c3be2f7edd5aaf8d7a02fefeb8ea276f7954", 0x44}, {&(0x7f0000004800)="0a87b317ae1be9a49a952d6bcfdeae764be8f095d451d657e1fd1b527d062b7f9b91caa112b1ee0fe586a28b1079026b0d919c660fae022777602896a697673479928c03811a76b75909553b5c28f3927dfa757cb226c4bc3676146a6e50", 0x5e}], 0x4, &(0x7f0000004980)=ANY=[@ANYBLOB="28000000000000000100000001001600", @ANYRES32=r11, @ANYRES32=r11, @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17], 0x28, 0x4}}, {{&(0x7f00000049c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004a40)="ba04aa1db6d03e5d75765a8d87a6b0cf31eb6e3543278b1a52a675e0af801b35fb6a6e02e7cf40fb23e7a257e6987a9d2dda161ff6451f92cbbcb7cc744e8e8c3e45c2345784cf55c75d147b14291e7e23bd663d399e88210f54e546e6d2bde0b844e05084cab9d941e6d20cbb68d49ecd068e703be12cb90ba3bf71e6a739040f4188cb95e2cde8bba4a00df2ee2199aea1f86ad55c735d98a508e804613bc9f96bdfef5eac56ee35a44b7260629235355d288d89ab956aa321fa6c14d6e10d2084f4d88a81085dcd52", 0xca}], 0x1, 0x0, 0x0, 0x1}}], 0x4, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x62}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r18 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe85, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xe, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0xa, 0x3, 0x20, 0x0, 0xfd, 0x5b}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r18, 0x0, 0x0) syz_usb_control_io$sierra_net(r18, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) 6.403965548s ago: executing program 3 (id=3768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 5.19164906s ago: executing program 4 (id=3769): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 5.081027121s ago: executing program 8 (id=3770): openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff000c00000060080100001d0cec4cfa31c1ff45f9c7fdc145f3b8dea68e14fe0356d7"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6028d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0xffffffffffffffff, 0x4, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) r7 = dup2(r4, r4) syz_fuse_handle_req(r7, &(0x7f0000000280)="0d1c409c14b8ddbbe2423ac75d732f3d0e9cd37b375b9673cb39c6b35cbb85c4ba83de9d23bbcdd53a9f0d7c92b66f6d872096b32f4bdac32a6136c86365cfd42c3b0a25fac76123b6d700d3ba70cc138bc435d3b1fcee2545c3a421119087bddbbfd0418488219343819cf0a6780d54166d2769a719b207136357ff3f505fc1d6144239ba630b15e7f8aeef7be5cb8c9e738faec0d1ab79d34b994e098323b94d32926bc3b0fd88c13cc781a0fc3da7c4d83fbaf3288fabe01685a3422570fa4cba7e840bd0a01e995c91c5aba51ca15461dc1916bde9e70c66f3aae48475e95aea1f8e6c6f10104d64f767b7f9b7909f5caa5fd61ec7bc7392bfb7fe4f1d1d0528601a87f9248693f31a0f2ea07a0f33e670bad3ba0c648266195c6d9a76cd973a9da6016d1f5e0d49122f64da8933cfcf6a970d11767279a9e8e37a30a007e6ea473e146069e72894fcd378e17d4fa761999c128492a0321c3153edf7b28d0cddd78758f5192a924fbe2e8c594cf35aeffc635b14903d134fc5f7857218f99266c64be16e5f4ad76a8b5f6d39ca2451afcdcb0cf42322a5166becc90621f99f28e42bb2cb610039c45e54cc4bb8e8210e612a3f1ac93366b7bd77410af8b4b3eb03085354c9f8d12cc62da82eff96a006dab656c10e1bf210124b0ed6841158ec70981a399ba7c406f3014bf77553be6197d79dc1d31ac4c598bdbd007578d50f00ce85810e0759e91505549c70005a5f923aba20d8e05d0b764680b9ea259c8fa71f1ee36b71da662b825019c07aade7db363662103887079dea43ca30c32e4f0d9ff043720541633157a3ff1dc055ac1db5b25765b7ef2e338c104db28b6be7fdae54f04075e26ce38ec71d35c029df580ee3ef68e46359031aea121d0776398d1f1e28e9cbdc20cb58adf5dfa01a2819f697bb3189ac0d32eec43c0ef75f5bd4c7926d18daf9a6e9265c961aadbed4fb9627a1f0a6c3dde66fe5530993a7f150e5b361ad0db403a864ef4f5e0f21db55aa22055bdc5b282b057d07efd6abe23f941a62d6f613a1ff8d31da632284e89a3069c6b26ef35e55fc846fb1c28651cc5a879a4994568c4639b9fba8395014c9f4f6152cee1ddf8d582bc496bcbad8e39e0a5a3e713deed021eb9d5b3f8679a8bddc08ca77d7cd101006c5021b65cc7648a646735d9d7f6e54e4fb5bcf1fd9aee4beb700e597011a2fa6c01d22e9b6c7a5afd7def8ab0a3e612d8a5ce571dba2d0696155c3dbfcc851293eebccfac6855a7b024d762e768867f57446ecd6e1d09a31959a6374c50445884dfcc68a62662e5701a25a1da8e0abd0428bb558f9f7e74c250d4af62afad71e0f23268a955c548b41cc83f6810c72c832476383a355abfa449fc05c7afa2ed70849f175e826361882503246e688983f472c418578ae4c893d847c0c7f8ec99352d3024a69134dfccbc6ec3351b321483c57d2d1e77c0c7551cdaf4c14038844b1b05c25541d1d48bf0dfd1ae40c35872a5b37c2958e3a60187531814f3adff870aeb42cf611c3f777b08f7dcacf5c087b19c17dfca413097a603823363c2c55597330de20a73465ccbe5acfad066fcb17c177827cf081c588b73c042150bf1a18aff97518fbc1b4d5d22f29077e186ae9b998b4d6fdbcbc8c3bd57dcc61cc322537743ce480c1dea39adcc6a51da745a60e5272a7181986bcb992895035f0f882cdf79c56a84cd88c9bf0b7dab9c1f453cf4c05e2a33f43f4252fdcf99cf785e639bd9d11c374d4e3107ce128d2a823b6a8631a8fdebdf14a0bfc3f79d44cd54d3e8b9c5a3f41b9a1187e23f5a5eb5fadff92d746ff3befec7189ca19c1987551d0fec321cc306d235f82b3f479f3d7a3c1d2377afe3f22a49c682646e9893d7700061a0229a99d360f89d281dc6bb95b92329cc7277b89a9e6a3edd3c753cbb93e9f1249572bae520fb7c46970f527fd93c445a8159d4992badc395c05313462d37c4f651afbdb04f9f42ad4433c5c765735731ed6d8c97e4ca9fd3a1885de6c051e652a1ea40230e9d854ec2145c78ef5574deac83e78df8932dde1d5c46862c9f808394dc7f064b5649cc7b2627a55683ed33f2712ad2d4f77ec7f2be200e01fca138b3d1f42916a54a66561916bcbd3109f6eacf5096e478442e56e5af61f7c32c681bd35bf94a429a52024a48f6002978594418b66c6eb0fa91dccc4fa83d48927349b8a7cbb70670bd78b8acbbcb554a219cdc6740de4bbfcad2250fc219436ba5db017c172d6e24eaedf29d169b8867fc84eb2e721b31b08604a6fbd8d5edd9bb0152346509619f4a0f41090228b10868f56cd7d7c025cccc8f2b4a7d85ab91862c65d5d578fd5c046928c5c8f999611dea07a1451357b4365b33bac0a2a842b84e2cd4f790dca74cc962000f72d821b093e271e63680c0e9019769f3abed377f51f2e0a373958dfe351a1db29da4b74f9ba1250a8a0b985ed86cd7a2a4ede57ce00dbe77f5c797e6b9896ccb978d3a01047f9ac7d66e820073193b6a3400ff41f2f8a98a44a0d2a608db3000571efdade9a44f278272e7ada101d275c589fed2ee0191801b7a2ea62dec117c9cfd96ccb73de7fa2eb4d60a7ce1170047a5266668da1aa8489c6e4ce564607a485afc6991ba262cd6f155c23fbb47610f555e0be090854ffa0d610ae4baa1dbd1f36249beb0510b8d96132b6396a6261214f3153bfc4f0dcfeb55046bcca5868aa913316a2e802f9bfb51caacfd0045d96b3983b883db123da07fc20d06c973e3dc74c53006c77361cfa9d3b2062da3f9740cc7335ec792d1b2c767e86417433fe047c8d9368c0c51373b5e5158503afa52ab08ef49616499ccb8dc829e343d25fc1fc2ea6c95933295ab397f07703d1d8defebeb44a2a9556bbd5414cf921abfa8df9bc5ea76922d728ef0024f516c9fd7a2927a68ba9a7dcc4f52c3d8b72909b2bde14408e476778a3221644dfa13794e365a9ebb670eaf691b3c2393adc441519c1125b960ff109ccab52294c6584d74b3084cfda3707f7153681c88a1578a77be9224a70ce400f4af3dd72452df147476abf2668c1801fe538be40042717b6c468fe1a33d1d597fb637396b8ebed9f64eee42e645bd8dc0e63fbd3a139bce3157ce7ed6f5f643ee26847908efaf61cd977627647bc0e4f119b924bb185664f1dcf2240b2697c89e8f569332d19ceec176642ebf0bf509bd3b9477272159d45b708510908e74cc5e0304104d5ed6e578b46dffcf64367fe9d274ab8f16f3154f3e83ce6d3ae92a2644ceeb8ec33e07f728319eb69dfa37bb70b40a1001ff0157173e33af633496062b17cfab8b5c06ef2fadfef280da4e1f70fbbac10981a0b35f3ada39733d7d31798e455f0dd1c530939f09df43b5aff342c39052a51d773b22acbc8c1525f3572ef469eefe66d1895a9ca3c637286e3f9acd29e890ffccbb313dd9da50aacce808d06d0b109a16a1c2bf69fc4b85b9b7cc9b9ba9e5d709c65fd0a879032caee38315eb049b12f11c4d485ef426fff3a4f91b4f1ad4c192c4074636787ff966f82c8d4fcad13a7b581718ee7318f6731da2eb1338c95c35f1f2e082bedea7f05b87d891876cfab51ddf2908ebb2bc153c20001ae9c142b35a3de474b732c5f629bd948ac9230067120671d296001cabe19e3d2302c1f32e4fcff1681ab2ef216309c21c6a5afc51ac500687a5140d015ee2bda5f3d8a15826a21a0a9495b36fe958fff32afe270f809f3a8f8cd2d8992a859e5de779bd8aa4dc6979807171282ef34502f1bf34f529cdad15671692f232a9f2dd2107f8198f7a9ea5883cbeb2a060ff1b13fc1a4df315dff940e8f013e8142c640acf51ebb2b2f878dafb6c12747cef3061f2235bccceacce4bf9829df24b9f9e9c5c259aafbe61ff6be827e492e2c03fa1e9f936196ff9acb28081f7ca74109d823c5c96b1e808bc2b8072763954ec5691f7935284e045c6d86c5c68d69b4502a5132b3c1cdc5e000ed1f6aa4bc0a9090a8923004ac05558e08827c71fd2e24f931f880244143a8d092dc8bb2b48317ff49fa0b494b3fea0741fbcac6cf780f93db42f47d23170a70619d06b0462f2fb04dabe2a0c94a1d97ecb159d426df47f0a1e13764e045d97ba75fd0eede9711d112581b4a2e66b10077aa92c98e30d6504f0c08c0c68015c88abbc991d5a799e588d1ee7492d699126627ace339c1bb024a59ccd9d3df0197c8e56219d76698b61ec94927f41ccc7bc80ab6f65380d31d58f796e7e697b28e371ecd9ccf6b58e9cf32daee54c5228268446677f600ca8d091b6a4774749d40d6d4d6a009ae12bae1c530e6961420507a13a2a32c4f0863c790159a26588bed9f50b4ffbfc8649adc8144779653b4226fed5ab93570fb3edcc1be70780f6ddc8d9ef1ff39d22bd20cd8ae0195d02ada60fa0d65e065b7a3950d5a2b77546ad8f1c1018344589085638793d26fb4a5c59c23f1c9b148ddcbc478e1867e109590c44c14f5ad6e8cda21a75358cbfe6f397c711eead2b1c73df1453d184a44e85c2f6ac0c266b0f67b001426cec02efb66085bd1b8bcaf06d6709d545895337fe36e9d26417238f36be5ba51d5cd7cd7cec452780b72bc441052f67496ed8bb4d393db8da52aa3b0ef10a74a33c2b7ee24f76642f83bfc3e686951cbd1983f1ea54d536f6c86e8b20a4eaefb9ca57308abcfd81357e3d0eebeb0ff805c151ea1d0063c3bea7120562886fc4ce284f33d4a85c830d8b9b9b1295c352c3f5db54973a5ed3788e5396a1add7022546f13db95e4ad1a994142aa4f98d644cd822192e3e1875da3b4a6cfd61cca36a82fd4c1f09db84f6b379483e2b81749609750b493e406c8add341d8855ef47d8e8cd49e9d1340be1223d268bed3a2cc949b74cf01160723d26de9b11138fd8e8957354c2a58fa30903b7544d2bdf49249e5ca9f5d030f0c17e7ec605482523d1da3b3ca6c94c8724c20b929954c1c1f321ba7f77e2e954056a2838e57696e40a2fc9f8c2b7e25a41cd500f4fffb196810b3d77f79dfc1f7179fd4e2c63957c65da8325185cdfa37a82d42ebfc631a87ce7ba60ad09132f1eabe7b870c88fa277578e19a6adabd328e6b453dae201ce4327a378174695264ff4411a3815c362480058038b1b70b652e89b0c7743548b897c80c53b16aba4d244753fd8c14c8bcdbe2a2710df7842a8af2bd0a966632655c01bbc2604151b80e349b2f5f63fc8fdfb34c7223803fc0fd1dcf7fb5471c65f59ef9b02c3c0440f7e44fa4759782a46165c64e2ffc246d0438248c461e932806ddc20d3eeb597d74e9cbfba85951c601fd8b903c80f5d8bd5fc5b824cd63d9bc2d38438eb8a8bd1fbbad944b3ca074eb318ae074ef4d7f12076ac1809ca6868be7e5fcbb953ee70bcccb7cf51422e8293faf3e88d4b179b4c7a6ab53638eb05c902715c023f33ba9e121aed0b7b5f0544b5275cf22093e64a7038cda03fc9014002cb52d4568625d321b344e566b50a7e9695c79daab4aa0fc82790cd32708bdc0242686052677eb163cba152231e45d0ad1b8238a7d1230f43612ae8b9525d1f98372774a326e9baa48e69093b215ea503e054729722a71c7e6c58b958f3cec95fdbf1811b7c8a53787e95d266a70d408798e94d9579e813a8e9e3d4bdb4f2682f7aa30b659c722aa07faa911543c57db9fb3abf73ac5b4096cadb4bfa2b25e51b11e754348a2abff384a16194af26590ccd657cf76bae1f1246b67ee0834105f008cf77b1320ecfcb87bfa7d2b2fdec1330f54b6c6cf2280119e39e9a66ccef3df0c4297e1c861a027fa2ea5a1ab530f5b94a98895405c620bb6faecd7e80bfb42d1a4646360e0e8355af548439f8db48d583352ea84385e271b3067bf7b047e69e23c3bd2c3ea74df48b3649985b0ef12a9f3803ccfa52e01381d30a9005f0415a149557b67d0ac7c439ba8b20a9eb293ee4d357cc1d9e1e7f707ad77e58f22d2b26f9a8e726e826b6722c2b910416dcdaf772476e55256fefb1fa5de0139e15c2bf84e267be5d5381bb30607b731c8f305a1b4e1e4bae0b59e61dc77b13d129dfff4fdaf48f95038cc11b14e8266aac4d59fb40346c07a7fee92327e40905e40f8135b0f6e9e31969902e9926a99d7ae30891be917581189ff998ea5310da0cf72faae333ab8ee7cb9f78bb0a8695a841b8d37709e2826594cc8927f5dd98c53ea4c5246b5fc09f756f29b61c21996dcb6c0f1e476674aa9b6f69ccfcf8672b048ee723af55104da1c2f5250e8bbb3bdf2b7edb4878a902032ab4115f516d804d2cde7bce6b0c6dcd1f0d321fe4bb279e4c45294df0fd33956469839c70bcb68c033b597daf3f515354e72fd1ecff87e4b8d1ae52e6ef0fc773a49ca76d0659454b59e9c62fc8e10131e50893c0c0a997fb5766157701ce8e6a6482bd8b0b53a6b4fd4227d8e02c6453114f161017b18e52867282010df15c361a0ed3b17636adce6567ca97d4864dc15fca353490aecd5d26af991a92dcfd3e4dd38b8ed9181dee7e2e20cc2600c3211eecafd0dac537a693573e843259c30789a3d0ef91b78f95ed5da1c9e61716f651284e4eea663aab9c30d28a620745e44fbcf71221a23d332d411d17220c5a43321cbae90ba8104ffb4415d7563a21406d6be1fdc9abfff8998b51628b28b4ed84ded6804726cae5b62281949bb7cd7bec7bb2dfa8d831d4928b274c7452d2e9f8a37c67c98239b121d3acf381a10469d0dee019d38dbba865fdecfa34e39b0dcd4cf7a66e30f87d4f26d4190fdc62d44c850e94121ace3d531de3204ed5f838f5953c98b44a387a0cc95fc5e76facdf3a9f98183d32d887fb7d997a37b4737861bb12ea8e412e1015d3cceff7b448381f3fedd35a535e524f9e6df67e14882d9ec956a81e1972392c8c79cec77fe6d0f88a00710aaab4878187d6c387cf1ade1c61ca3b9bef117ad621c9a971d4f04a2e45314422f9f7606c932ab593db97747d7666948d04aacee1ceb6ae2fb205f32d953d94e5f2c7cb332eefa4bf11c999fb67e287960b64c36fa37de3c81fe53e057abc6f5575cb900a117242340126f721f8ad4c3d744440f2d9e1abf71fb24ca6f5abd392ce1110d4d138cd312373f99eef5a9b55a2a92a73be76860c380e5f2f1c9e5526ab5dc6f91d81d086dcfb70165c69b9bba0670366910ed053d43a61bc8215e95f304d73d38a689f174ac4940f1c7c87a011fbaa364e54887a0f38281509282943c38c77f9dbf385d0f8f62d30b300ae7ce24eb5b855057fc4fc8efcb05c4451fbc4de6f8b545559fb2bd2f8200eaa2822990d4afa0398e4c4d40534ece023306239bd86e2a0b9ae2fbfa640046379c1e2f0471e0005bdbd929119e54808f53fbc9ae318fd128aecaee2e314efcd76085a1da95b1261a321fe8229434dcc57844f15914221116d53faef06466643b996d5802167c0dcabe44979e576b4290aceee7aa771820fe113b85162e45961dea78ba31e0c54faa89ef75263d15580dd144745ab42b5d510f1beb115832df59ce57be19113f97aa21d984448e7fbc92c1291fd84f98e9ddd832336be330528e9df7b88f17f47708dfa401ba49562ef3650155bca61a81348896c151d05651caf865a3c40dbaecde5036233dd42a23f5712c93b2fa1c3ab754445bd258491fcf508ac344eeb38db1a4cb9980b1d97b826d76b0b10f8b8937dd0a9385c66ffffdab1819049c35aaf90b15267f7c58ff236c425414286bc7dfc3bd22abea8aeaeb113592ed41fa566d1426c85c3db9ef04e70b31ea52ae2f9352ae1195035b517f7e36350906773fabaef38fb29348b9797ec90cce08e0afb923fcfe0fe62ed2abd97d39949993048ae10c5be54808986f6c4aa437e413b449f57b0b0fc6f393808631fac191af623b8e90193ef2b0dda64f26b4771ab256bccd61ebf4b7ad099156986d64e77d37039d4a2e5836528a10c8c9d9ca9c640804dbf2db4154384cd8a8c02ce863e102ea944c17a643c120361d631b7f349f920ae6bd06db3e3af1bf902c3204e8632d27bd928701ee206a7d64448f9a81265a17a31878e3c1a2a044fc6f956b557471d1bf7dfe160716028191e851e18439f4e3561aa589528889090a3b673f70aebc1edb12861277f04f300acd8278e5f640ac0dc7e4f8df3ea39186119b0599f3e7bedfa0ee65e4d25d8586a2d10e773182d98ea9eef3b3d9805697adce7daf083b8a934c0d9c6467be25a6a22b6b246abcb355d03b8c3345dff9f40e253ae80a2de668dd9da044a2b90bc5788b0fe3a2c6387b3c817ea456eb7713a728caf4287d15006500435ff93eb6803e42e57c087c483e23605d9dcd6f758883fbb990eb0f91f351191956ac451e1c1d1ae113c03311057f5e70d8231bef8edb7c2cbecc4ab3e46b02945afbcdb2e8b005819dd141055af1fd6a3240af08751cd3a78ff92e39bba4d3c23aef960646512b3b86d6a8fa6880cfce6d58e1fbe734ac5f9b7018451a7a5879b3767dfb359eee615bab65116237e5de5b96bf9fbacd11702c73a8e478a64895d15ac0110737c3ab91222bc4c87326b5d5e3cf089da0a76d43222a8eeeb5286a4cb2fced98ebc2f6e876e8ff48b6f8f8264e52cf5b38906d657bd8d0d91e2d7846224ac60526f878e8189d80957a73a0fb95223842fb819286234d742c0aee14c75ed069411f7631aaa3e2a011fe75e67131a51733b9d2dc7981935d559a08a965363cdbc02dbadfcc4435040cff61df0cea2dcc5017deab9076fcc1a11ebe5020b6c96a16425397df15881815cf60b942648c234a5614ecffd4d5de50884934bdbd5177d24ee76f0c97fd0a2b97e527fa86c73ec672398f1d88c03d467f2712908d8fff5e02b4e1fe2d7bff02205597b3a5360e2767a3d7c488d222a3ea39d3fec61423e349689297868a4bfcf08a0938729fbc819ca2181f03f4ea42c7892dccd76560f1ef812ba7380681a8943e7bf2d6bb0729002a33a4a595c411cec870e8757e5d9cddb17563a627e598bd170cb6eab4d0d8a02c926bd0d67d2084df5873591ba8da1309f9c309fcdb1e1afea2ed48b467170f9d2539e62e75ed1e9ad94e2f574bba5e25f7473534e82e91263cef442f31e9e568a3eafa2b9de2a99fa681c6f6f245db26c24d56ae77fe239c63a70c2edd113f0d48bf5c2a887e1512bfb2801a0c628d3b91f57b1d1401b0e5e6012d32dafacd08775b1b28f15c44b03cd340a4e45be0534c4f5099c5bda5ef0035ab7d1ddbdb2e73ad49e15f6a04b5b09280581ebe2ce940a8058e2d14a0556c14adce8a40b6f0f78cc6bf46f0d0b2c4f9ce79e60eadd828eec8fd5c6b1196f685add24c959d4f1c9cbf7d21fb010df2f26fd1f1a5186186de0ab6f7fbf7ac2406a815382aad4edde90c8aa08ce053e86777fcbb089b4cbeb596949ff04739b53c4262b84881814c1cee97eb9147854b54ea354d53d906869c21e5772be517c127a0feb3844acb8b721f060e065b096d5f390b3557e25d50bb887ac018564a9b3ca3fe38eec76dace59bcadb81ed3764c177766ffc8770b7eca1fd3c87f3fc84f157974dc6356ab41388d973ae0a5a4a1d3d08f207b4add5bb902034f0be23bd27010cf5fb3a8ce4c34b123be47bf50fb6ff1593602e720d893561f72fcabdf7141ea4a274d319e9157ee4deb55dd412296525a1d82726fc8e8ad1ebddd6f7ac4ac10d3f59473cf5b0ae0644db9224268415ad314e4a7f4e4a17be80425198c097287ef95948ef260eb02d59e235caabeb1bcbf8829240e5637358879016ea8b5b06337d58aab36bc1a981d7667974068ca1a353a8caad2885236f407fcfc277210ff15f4d7d0caa2b31e5f745f455ff36a5fd9a9036c02f319a049ecb1d67c057130ae3d68374c82191059b44f8aebdf4574cd84cf7c031b6e177e8f5808f25ac76df8d7f9aada99e1a16ea5b22cc4bb349a352aceb2cb1ea47710704d446498f4d6ff2d8705797cfe62e03de9064a5831df451d021fcd93a71c3105f81df9d1ce5dc27d26d77326ab4bedf0c428a70772f2b0630b0640f643292e68e9b44d53f5c401f6ee09f8217b77b2d308e13cbedefa56920ad948b464a74c3e9ca9259d10132880d7dbd2c972c772985f7022a41ef473c254289982b9cde41f937a1de59b9a50caf728accac23ba485842dae35ad4ed412a31d2a134bf05ede9fc70fab45fee38f1f7e749e803446b418cc1b5e7f2019777ae03eab5e129e1eef2195ca84cde2848df14a93bbc3a917f1e06ce3753cf127f2241295fb630f6e27eadeaff570f955ace44dd204dcc082f7bcbe310e2c33267852049cb839142d072e3f3ebb1fc289c78769fd0f05578630e42a5829b82c6d535c012204aa74659282ba0498156e2183ecee174054d45fd97e5a0159255d8af432563d367f045d209c67cc70f7cf13b9a6578983ea640f0e8e66113484f48d41cb65b1338eb6cec534b3acdf9e5a1a3ac9157d75986583edfda4958e79593b6808b4762f823a6f442ee1749e592bc103f2b9e16107b939ece49cb447e5a7d34d66f18567d0e981f4fef25a467144689662783503a03e1800d22f40f61903d8270453161a68386bdd94d59dd66eb5ae067d4129be23a0b17b89d0478734460bb88c5771d9444caa769aa62d56bd128bc328e03d2e18d966f5784398ca2aab86007f7ca00908d4bd7f2f3ecf3024110b073304c7bb17bd73725721a99e94c8d5e5da7a839d58f2196cace99b98d7f584a49fee2a426e6ec3f08e520f7965aa2dad97084c2ebed43c58dbc9116f420d4735decc47dea514b689f5479c56b6128dd684c4fbf0945aa15363276af833b27b82cb48541413bc9fc51f9ce57c14bb6c39f86cbc99b69e5d91e7cf72f340f67012eb2f5fb21d830e97eb3664674ecc36c754f90d1a8f6092fe3a48827849ec95ed35887cfd2ab3f26331bdc154ad034f31ef26ecec5feedac1367f4f642e99ebb409ddd5dd8d0087ebf048e4924a2119c69ff00af79233443b897f7bd1d80f4d34555719bd8dd9c0d824d0437c2adfc598fd4c2c2d8cf7693e05238987bdb9bb04751dfcd44fbced899a7dadef499b9bfb45ee52ea59369c950821a667712946c7207e36473660f3f9c9906ed889ffe7a8c735e98d41cc96aecf3e577072cb4711eb690d28ff41dbe9070cd73da26875994a7b8480f2d21bd4b92402bc293fea154071c401581a9b858dcb4113149105d793fd4d0e98894f228f24250ada364f49180fbd116e0677cbfbe928a840dbfab2791865cec67ab39affa7b76c266285ed2ede7ce77e9e6f21545b8d177cc73e5142e6bbfbb3e9793716de8d6faeb74e18475cac7541e3ccd875cc0dc8bd5a01e468700d5817fc44b6dd64d74dbe0b351c80815102a0dc2038c83dc75189bb4ca425eabeeaa70fcebfda8f16c4b083762811325fdc6b94f84b6d4629929b85d0cf678b28651cab8a825f28440ca4e7a2193c6f9c769b0aa226754fa8eabd7cd1d31ea2478a83e0d79eaff6f72bfb05c31098f4640256b8c21ef25808821c08cbc68e8b6205fdbcb10b17d63cfb5ead7fb8ae1", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.965664351s ago: executing program 1 (id=3771): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup(r2) getsockopt$sock_buf(r3, 0x1, 0x3d, 0x0, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000280)={@broadcast, @dev, @void, {@arp={0x806, @generic={0x2, 0x1a, 0x6, 0x1, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, "d5", @local, "91714673c45e42448a91b2bf"}}}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c7132fd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799e59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0887a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4d824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26ed577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147e3ed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c316969ab068208b031338bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x4, 0x2, 0x0, 0x9, 0x20000009, 0x40, {0x200000000006, 0xfffffffffffffffb, 0x4, 0x100000001, 0x0, 0x10000000, 0x6, 0x3, 0x80000002, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x1, {0x0, 0x3, 0x0, {0x0, 0xffffffff, 0x177, 0x1a6, 0x7f, 0x7, 0x7, 0x3, 0x8, 0xc000, 0x2, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r3, &(0x7f00000001c0), &(0x7f0000000200)=@v1={0x1000000, [{0x1, 0x3}]}, 0xc, 0x2) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r6, 0x1, 0xea, 0x25dfdbfe, {{}, {0x0, 0x3}, {0x14, 0x19, {0x80}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000040)) syz_open_pts(r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 3.87051681s ago: executing program 4 (id=3772): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r1 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r1, r2, r2}, &(0x7f0000000500)=""/93, 0x5d, 0x0) 3.781157086s ago: executing program 8 (id=3773): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 3.758637659s ago: executing program 3 (id=3774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)}], 0x2}], 0x1, 0x0) 3.735777198s ago: executing program 4 (id=3775): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x80000000}]}, 0x34}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgsnd(0x0, 0x0, 0x2000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000017c00000400f6000c00018006000600894f0000643802"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @private1, 0x5}, 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) close(0x3) wait4(0x0, 0x0, 0x8, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) wait4(0x0, 0x0, 0x20000008, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x1) 2.560198378s ago: executing program 8 (id=3776): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x2b, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c801}, 0x8010) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0xc0045103, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000bc0)=ANY=[], 0x0) 2.212757307s ago: executing program 3 (id=3777): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=r3]) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) 2.121907464s ago: executing program 5 (id=3778): r0 = socket$alg(0x26, 0x5, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, r3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000002c0)=0x1, 0x4) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385aa3d4cc64911e1a89", 0xb) sendmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x1, 0x0, 0x1}, 0x4, 0x4, 0x0, 0x0, "8a18ac65a8ccaad2"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x44000) r6 = accept4(r0, 0x0, 0x0, 0x800) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000000c0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000400100000000000040"], 0x48}, 0x1, 0x0, 0x0, 0x48011}, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.078959561s ago: executing program 3 (id=3779): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0xffffffff}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) fallocate(r4, 0x3, 0x100000000, 0x80000000) 1.97666916s ago: executing program 1 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000000000000006700000008003d"], 0x1c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a202, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'team_slave_0\x00', @multicast}) 1.793095594s ago: executing program 5 (id=3781): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x188, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x169, 0xe0, 0x0, 0x1, [@typed={0x72, 0xe9, 0x0, 0x0, @binary="1a522358bef81f429c694686547169d8784364811b3fb7df8761ca8cf6db1de0bc5119e8a049b26476267d714da9d10b57ccde4c1fed8a561aa67d4d680c6e8d03fa2db21a4f5ac21066db0eec187f4e90928222b286a914f311493ed9bd3765b09fa2e1f85fc3aa85d5c3c1c74e"}, @nested={0x8c, 0xef, 0x0, 0x1, [@nested={0x6a, 0x8, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="ffcad7188d92faf367bb1221a987e9551401c14e8b2e794a26f8799c7aad658af48108edfe149e88d961b456ac73d713f0ae032cc40c975d3c04dbad731197a27354673cb1c9", @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0xb2}]}, @typed={0x8, 0x1b, 0x0, 0x0, @pid}, @nested={0xc, 0xe3, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x68, 0x0, 0x0, @pid}]}, @generic="73c751f922add829453b0edf6da1d323dee4ff1efd42db85fcc98f7cdc49295ea38a8a2f6f6e8816510c2cb275313a865bd7a09be25face3626e717003138a9d4250a47f10c28a7392431199f4d8089df000edb3557d121cbc802743682450f2deffd4349e"]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x188}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(r1, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000000010102000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) lseek(r6, 0xfffffffffffffff7, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028b6296be141526b7e"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCL_SETSEL(r3, 0x40087101, &(0x7f0000000180)={0x2, {0x2, 0x4, 0x800, 0x7, 0x5}}) 756.717478ms ago: executing program 3 (id=3782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000001e80)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x2, 0x24000844) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) r4 = fcntl$getown(r0, 0x9) sched_setattr(r4, &(0x7f0000000200)={0x38, 0x5, 0x21, 0x0, 0xfffffffc, 0x6, 0x6, 0x100008, 0x0, 0x8}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x0, 0x1a}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x40f6, 0x29a7, 0x500, 0x0, 0x0) 588.353073ms ago: executing program 1 (id=3783): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r2, 0x0, 0x80000001}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) (fail_nth: 9) 0s ago: executing program 4 (id=3784): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24004815, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) kernel console output (not intermixed with test programs): th: hci6: Opcode 0x1003 failed: -110 [ 1012.912492][ T30] audit: type=1400 audit(1758469935.174:978): avc: denied { map } for pid=20228 comm="syz.6.2573" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1012.923371][T20229] binder: 20228:20229 ioctl c0306201 2000000002c0 returned -11 [ 1012.937944][ T30] audit: type=1400 audit(1758469935.184:979): avc: denied { call } for pid=20228 comm="syz.6.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1013.073142][ T5912] usb 6-1: USB disconnect, device number 33 [ 1013.184297][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2577'. [ 1013.523629][T10119] tipc: Node number set to 11578026 [ 1013.912381][ T5870] Bluetooth: hci2: Malformed Event: 0x13 [ 1014.313942][ T5989] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1014.393621][T10990] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1014.474189][ T5989] usb 7-1: Using ep0 maxpacket: 8 [ 1014.484269][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.507296][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.537894][ T5989] usb 7-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 1014.565695][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.588200][T10990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.613967][T10990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.641683][ T5989] usb 7-1: config 0 descriptor?? [ 1014.691412][T10990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1014.727102][T10990] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1014.747919][T10990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.778085][T10990] usb 2-1: config 0 descriptor?? [ 1015.338450][T10990] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1015.798799][T20348] netlink: 'syz.9.2616': attribute type 61 has an invalid length. [ 1016.276611][ T5870] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1016.286817][ T5870] Bluetooth: hci2: Injecting HCI hardware error event [ 1016.295385][ T5870] Bluetooth: hci2: hardware error 0x00 [ 1016.699524][ T5912] usb 2-1: USB disconnect, device number 51 [ 1016.748901][T20355] batman_adv: batadv0: Adding interface: dummy0 [ 1016.776865][T20355] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.820088][T20355] batman_adv: batadv0: Interface activated: dummy0 [ 1016.936959][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1016.936976][ T30] audit: type=1400 audit(1758469939.204:981): avc: denied { map } for pid=20354 comm="syz.5.2618" path="socket:[75356]" dev="sockfs" ino=75356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1017.022750][T20355] batadv0: mtu less than device minimum [ 1017.034243][T20355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.046141][T20355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.057537][T20355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.068885][T20355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.080241][T20355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.091615][T20355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.102455][T20355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.113512][T20355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1017.124334][T20355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1018.131171][ T5989] usbhid 7-1:0.0: can't add hid device: -71 [ 1018.141265][ T5989] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1018.220969][ T5989] usb 7-1: USB disconnect, device number 3 [ 1018.353731][ T5870] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1018.616786][T20385] genirq: Flags mismatch irq 8. 00200000 (comedi_parport) vs. 00200000 (rtc0) [ 1018.728392][ T5989] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1018.963546][ T5989] usb 7-1: Using ep0 maxpacket: 8 [ 1018.970364][ T5989] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1018.990977][ T5989] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1019.042516][ T5989] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1019.082954][ T5989] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.166448][ T5989] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1019.236072][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.507216][ T5989] usb 7-1: GET_CAPABILITIES returned 0 [ 1019.515340][ T5989] usbtmc 7-1:16.0: can't read capabilities [ 1019.857158][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1019.872664][T10119] usb 7-1: USB disconnect, device number 4 [ 1020.012242][T20433] netlink: 'syz.1.2650': attribute type 61 has an invalid length. [ 1020.960887][T20454] netlink: 179596 bytes leftover after parsing attributes in process `syz.6.2660'. [ 1021.479914][T20455] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1022.267682][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2667'. [ 1022.287094][T20472] net_ratelimit: 11 callbacks suppressed [ 1022.287110][T20472] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 1022.363645][T20472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.692372][ T5870] Bluetooth: hci5: Malformed LE Event: 0x1d [ 1023.796001][T20518] tipc: Enabled bearer , priority 0 [ 1023.806026][T20518] syzkaller0: entered promiscuous mode [ 1023.812763][T20518] syzkaller0: entered allmulticast mode [ 1023.857146][T20518] tipc: Resetting bearer [ 1023.985691][T20517] tipc: Resetting bearer [ 1024.028616][T20517] tipc: Disabling bearer [ 1024.098503][T20526] 9pnet_fd: Insufficient options for proto=fd [ 1024.884015][T20535] netlink: 'syz.4.2688': attribute type 61 has an invalid length. [ 1025.942139][T20553] input: syz1 as /devices/virtual/input/input46 [ 1028.145531][ T5870] Bluetooth: hci5: unexpected event for opcode 0x200b [ 1028.758145][T20608] binder: 20607:20608 ioctl 4018620d 0 returned -22 [ 1029.692015][ T5870] Bluetooth: hci0: unexpected event for opcode 0x200b [ 1029.938326][T20647] Bluetooth: MGMT ver 1.23 [ 1029.968597][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2730'. [ 1030.021346][T20649] vxlan0: entered promiscuous mode [ 1030.039991][ T1118] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.152819][ T1118] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.167357][ T1118] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.185259][ T1118] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.423551][ T30] audit: type=1800 audit(1758469952.664:982): pid=20657 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.2734" name="nullb0" dev="tmpfs" ino=2168 res=0 errno=0 [ 1031.955054][ T5862] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1031.966859][ T5862] Bluetooth: hci0: Injecting HCI hardware error event [ 1031.978906][ T5862] Bluetooth: hci0: hardware error 0x00 [ 1032.255913][ T5870] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1032.277223][ T5870] Bluetooth: hci5: Injecting HCI hardware error event [ 1032.544686][T17585] Bluetooth: hci5: hardware error 0x00 [ 1032.660843][T20687] netlink: 'syz.1.2747': attribute type 12 has an invalid length. [ 1032.673512][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'. [ 1032.905632][T20691] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1033.601100][T20719] netlink: 'syz.9.2760': attribute type 12 has an invalid length. [ 1033.732257][T20724] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.2759'. [ 1034.162620][T20728] netlink: 'syz.9.2762': attribute type 61 has an invalid length. [ 1034.233761][ T5862] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1034.593693][T17585] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1035.153593][T10119] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1035.323852][T10119] usb 2-1: Using ep0 maxpacket: 8 [ 1035.333241][T10119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.362165][T10119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.391083][T10119] usb 2-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 1035.405819][T10119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.421280][T10119] usb 2-1: config 0 descriptor?? [ 1035.494054][T20751] netlink: 'syz.6.2772': attribute type 12 has an invalid length. [ 1035.502104][T20751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2772'. [ 1036.040282][T20765] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.2776'. [ 1036.255554][T20772] netlink: 'syz.4.2776': attribute type 1 has an invalid length. [ 1036.263643][T20772] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2776'. [ 1037.767493][T20792] netlink: 'syz.9.2786': attribute type 12 has an invalid length. [ 1037.872530][T10119] usbhid 2-1:0.0: can't add hid device: -71 [ 1037.913768][T10119] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1037.943154][T10119] usb 2-1: USB disconnect, device number 52 [ 1038.313149][T20808] team0: No ports can be present during mode change [ 1038.821067][T20838] 9pnet_fd: Insufficient options for proto=fd [ 1039.013717][T10990] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1039.256236][T10990] usb 6-1: Using ep0 maxpacket: 16 [ 1039.270879][T10990] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.290173][T10990] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1039.301434][T10990] usb 6-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1039.316609][T10990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.327684][T10990] usb 6-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 1039.353812][T10990] usb 6-1: Manufacturer: చ [ 1039.368872][T10990] usb 6-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂ [ 1039.550559][T20858] overlayfs: failed to clone upperpath [ 1040.287208][T10990] usbhid 6-1:1.0: can't add hid device: -71 [ 1040.296144][T10990] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1040.315179][T10990] usb 6-1: USB disconnect, device number 34 [ 1040.380763][T20875] netlink: 'syz.9.2823': attribute type 12 has an invalid length. [ 1040.424217][T20877] overlayfs: failed to clone upperpath [ 1042.002903][T20918] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1042.489018][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2848'. [ 1043.614783][T20954] 9pnet_fd: Insufficient options for proto=fd [ 1044.031740][T20956] netlink: 'syz.4.2854': attribute type 12 has an invalid length. [ 1045.111452][T20977] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1045.304045][T10990] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1045.463543][T10990] usb 2-1: Using ep0 maxpacket: 8 [ 1045.471413][T10990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.563811][T10995] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1045.594840][T10990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.669593][T10990] usb 2-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 1045.768354][T10990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.831526][T10995] usb 7-1: Using ep0 maxpacket: 16 [ 1046.017051][T10990] usb 2-1: config 0 descriptor?? [ 1046.038672][T10995] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.073621][T10995] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1046.086298][T10995] usb 7-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1046.096774][T10995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.105086][T10995] usb 7-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 1046.133698][T10995] usb 7-1: Manufacturer: చ [ 1046.364028][T20995] 9pnet_fd: Insufficient options for proto=fd [ 1047.663495][T10995] usbhid 7-1:1.0: can't add hid device: -71 [ 1047.672804][T10995] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1047.696690][T10995] usb 7-1: USB disconnect, device number 5 [ 1047.939200][T21021] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.2876'. [ 1048.093507][T21024] netlink: 'syz.5.2877': attribute type 61 has an invalid length. [ 1048.450128][T21026] netlink: 'syz.4.2876': attribute type 1 has an invalid length. [ 1048.461932][T21026] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2876'. [ 1048.760603][T21033] 9pnet_fd: Insufficient options for proto=fd [ 1049.124566][T10990] usbhid 2-1:0.0: can't add hid device: -71 [ 1049.178772][T10990] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1049.293795][T10990] usb 2-1: USB disconnect, device number 53 [ 1049.657002][T21046] tipc: Enabled bearer , priority 0 [ 1049.675547][T21046] syzkaller0: entered promiscuous mode [ 1049.697195][T21046] syzkaller0: entered allmulticast mode [ 1049.744647][T21046] tipc: Resetting bearer [ 1049.883765][T21044] tipc: Resetting bearer [ 1049.988708][T21044] tipc: Disabling bearer [ 1050.543312][T21059] batman_adv: batadv0: Adding interface: dummy0 [ 1050.569971][T21059] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.681016][T21059] batman_adv: batadv0: Interface activated: dummy0 [ 1050.689646][T21068] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1050.699142][ T10] IPVS: starting estimator thread 0... [ 1050.710879][T21065] batadv0: mtu less than device minimum [ 1050.727506][T21065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1050.738904][T21065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1050.750302][T21065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1050.761673][T21065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1050.772976][T21065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1050.784358][T21065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1050.795708][T21065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1050.806953][T21065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1050.836928][T21069] IPVS: using max 46 ests per chain, 110400 per kthread [ 1053.027369][T21134] overlayfs: failed to resolve './file0': -2 [ 1054.038662][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.045324][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.071162][T21157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2932'. [ 1054.983508][T10995] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1055.154577][T10995] usb 7-1: Using ep0 maxpacket: 16 [ 1055.277548][T10995] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.333520][T10995] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1055.349730][T10995] usb 7-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1055.359157][T10995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.365243][T21171] netlink: 'syz.1.2938': attribute type 12 has an invalid length. [ 1055.370629][T10995] usb 7-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 1055.393505][ T10] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1055.396637][T10995] usb 7-1: Manufacturer: చ [ 1055.401271][T21171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2938'. [ 1055.406714][T10995] usb 7-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟 [ 1055.595310][ T10] usb 6-1: config 5 has too many interfaces: 246, using maximum allowed: 32 [ 1055.613717][ T10] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 246 [ 1055.637546][ T10] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1055.668050][ T10] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.679316][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1055.689170][ T10] usb 6-1: New USB device strings: Mfr=0, Product=248, SerialNumber=0 [ 1055.697849][ T10] usb 6-1: Product: syz [ 1055.925764][ T10] usbhid 6-1:5.0: can't add hid device: -71 [ 1056.042747][ T10] usbhid 6-1:5.0: probe with driver usbhid failed with error -71 [ 1056.064587][ T10] usb 6-1: USB disconnect, device number 35 [ 1056.169195][T21191] No control pipe specified [ 1056.505414][T10995] usbhid 7-1:1.0: can't add hid device: -71 [ 1056.529968][T10995] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1056.610125][T10995] usb 7-1: USB disconnect, device number 6 [ 1056.622964][T21195] net_ratelimit: 11 callbacks suppressed [ 1056.622980][T21195] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1057.530815][T21204] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1058.611813][T21222] netlink: 'syz.6.2953': attribute type 61 has an invalid length. [ 1059.354528][T21231] netlink: 'syz.1.2956': attribute type 12 has an invalid length. [ 1059.389265][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'. [ 1060.313549][T10119] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1060.494647][T10119] usb 2-1: Using ep0 maxpacket: 8 [ 1060.576949][T10119] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1060.687937][T10119] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1060.760503][T10119] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1060.804652][T10119] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1060.838740][T10119] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1060.868078][T10119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.896902][ T5912] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1061.088004][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 1061.154486][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.180855][T10119] usb 2-1: usb_control_msg returned -71 [ 1061.199170][T10119] usbtmc 2-1:16.0: can't read capabilities [ 1061.217524][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.280252][ T5912] usb 7-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 1061.298271][T10119] usb 2-1: USB disconnect, device number 54 [ 1061.310627][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.366433][ T5912] usb 7-1: config 0 descriptor?? [ 1061.899720][T10995] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1062.001949][T21291] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1062.063562][T10995] usb 6-1: Using ep0 maxpacket: 16 [ 1062.070740][T10995] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.086110][T10995] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1062.095028][T10995] usb 6-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1062.104314][T10995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.112308][T10995] usb 6-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 1062.130518][T10995] usb 6-1: Manufacturer: చ [ 1062.136863][T10995] usb 6-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋퓏䞥ﬤ었橾 [ 1062.473404][ C1] hrtimer: interrupt took 36653 ns [ 1063.040493][T10995] usbhid 6-1:1.0: can't add hid device: -71 [ 1063.068546][T10995] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1063.113826][T10995] usb 6-1: USB disconnect, device number 36 [ 1063.617044][ T5912] usbhid 7-1:0.0: can't add hid device: -71 [ 1063.627853][ T5912] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1063.685529][ T5912] usb 7-1: USB disconnect, device number 7 [ 1064.029716][T21337] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1064.323296][T21347] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.3002'. [ 1064.735873][T21351] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 1064.747801][T21351] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3002'. [ 1064.803660][T10995] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1064.973740][T10995] usb 7-1: Using ep0 maxpacket: 16 [ 1064.996019][T10995] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.042780][T10995] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1066.143838][T10995] usb 7-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1066.152938][T10995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.182129][T10995] usb 7-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 1066.220425][T10995] usb 7-1: Manufacturer: చ [ 1066.230602][T10995] usb 7-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟 [ 1066.256477][T21360] overlayfs: failed to clone upperpath [ 1066.356397][T17585] Bluetooth: hci1: command 0x0406 tx timeout [ 1066.683567][T10990] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1066.843729][T10990] usb 2-1: Using ep0 maxpacket: 16 [ 1066.862696][T10990] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.902203][T10990] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1066.931149][T10990] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1066.940988][T10990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.952027][T10990] usb 2-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 1067.003279][T10990] usb 2-1: Manufacturer: చ [ 1067.017755][T10990] usb 2-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋퓏䞥ﬤ었橾 [ 1067.305041][T10995] usbhid 7-1:1.0: can't add hid device: -71 [ 1067.321013][T10995] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1067.363921][T10995] usb 7-1: USB disconnect, device number 8 [ 1068.565262][T21394] overlayfs: failed to resolve './file1': -2 [ 1068.912782][T10990] usbhid 2-1:1.0: can't add hid device: -71 [ 1068.925794][T10990] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1068.940452][T10990] usb 2-1: USB disconnect, device number 55 [ 1069.073259][T21403] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1069.690115][T21413] autofs: Bad value for 'fd' [ 1070.222357][T21421] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3028'. [ 1070.373512][T10995] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1070.603553][T10995] usb 7-1: Using ep0 maxpacket: 8 [ 1070.726541][T10995] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1071.043669][T10995] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1071.237503][T10995] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1071.250692][T10995] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1071.267244][T10995] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1071.290866][T10995] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1071.327186][T10995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.618265][T21433] netlink: 'syz.5.3031': attribute type 61 has an invalid length. [ 1071.943009][T10995] usb 7-1: usb_control_msg returned -32 [ 1071.985125][T21435] netlink: 'syz.9.3032': attribute type 12 has an invalid length. [ 1071.999962][T10995] usbtmc 7-1:16.0: can't read capabilities [ 1072.580516][T21453] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3039'. [ 1072.627738][T21456] overlayfs: failed to resolve './file1': -2 [ 1072.680492][ T5870] Bluetooth: hci1: Malformed LE Event: 0x1b [ 1072.760489][T21462] 9pnet_fd: Insufficient options for proto=fd [ 1073.391725][T21473] netlink: 179596 bytes leftover after parsing attributes in process `syz.1.3045'. [ 1073.465330][T21474] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 1073.473767][T21474] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3045'. [ 1074.440312][T21486] autofs: Unknown parameter '0x0000000000000000' [ 1075.049183][T21492] overlayfs: failed to resolve './file0': -2 [ 1075.578534][T21498] overlayfs: failed to resolve './file0': -2 [ 1075.631310][T21500] binder: 21499:21500 ioctl 4018620d 0 returned -22 [ 1075.994226][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3062'. [ 1076.407072][T21530] autofs: Unknown parameter '0x0000000000000000' [ 1077.402271][T21543] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1077.414739][T21544] netlink: 'syz.1.3070': attribute type 12 has an invalid length. [ 1077.424946][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 1077.601063][T21545] netlink: 'syz.4.3069': attribute type 1 has an invalid length. [ 1077.609076][T21545] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1077.713674][T17585] Bluetooth: hci1: command 0x0406 tx timeout [ 1077.793662][T21458] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 1077.849298][ T10] usb 7-1: USB disconnect, device number 9 [ 1077.934028][ T5969] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1078.083708][ T5969] usb 2-1: Using ep0 maxpacket: 16 [ 1078.090269][ T5969] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.117271][ T5969] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1078.131720][ T5969] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1078.161086][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.200483][ T5969] usb 2-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 1078.317159][T21562] binder: 21561:21562 ioctl 4018620d 0 returned -22 [ 1078.371955][ T5969] usb 2-1: Manufacturer: చ [ 1078.377138][ T5969] usb 2-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋퓏䞥ﬤ었橾㓵砾욷䁌 [ 1078.565619][T21574] netlink: 'syz.5.3080': attribute type 12 has an invalid length. [ 1078.576724][T21574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3080'. [ 1078.659145][T21578] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3081'. [ 1079.212809][T21591] netlink: 179596 bytes leftover after parsing attributes in process `syz.9.3085'. [ 1079.223489][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1079.375330][ T5969] usbhid 2-1:1.0: can't add hid device: -71 [ 1079.388073][ T5969] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1079.409301][ T5969] usb 2-1: USB disconnect, device number 56 [ 1079.423518][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1079.441115][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.461690][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.582558][T21591] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.3085'. [ 1079.706500][ T10] usb 7-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 1079.728588][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.747200][ T10] usb 7-1: config 0 descriptor?? [ 1081.514728][ T6669] wlan1: Trigger new scan to find an IBSS to join [ 1082.932711][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1082.956305][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1083.050959][ T10] usb 7-1: USB disconnect, device number 10 [ 1084.988490][T21685] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1085.252927][T21685] gretap0: left promiscuous mode [ 1085.310879][T21685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.324426][T21685] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.337044][T21685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1085.527333][ T1166] wlan1: Trigger new scan to find an IBSS to join [ 1085.982863][T21705] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3126'. [ 1086.288838][T21709] ptrace attach of "./syz-executor exec"[17578] was attempted by "./syz-executor exec"[21709] [ 1086.460114][ T1008] wlan1: Creating new IBSS network, BSSID f2:bf:03:ee:69:f4 [ 1086.946872][T21723] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3131'. [ 1088.158412][T21740] overlayfs: failed to clone upperpath [ 1088.267316][T21749] autofs: Unknown parameter '0x0000000000000000' [ 1088.724698][T21753] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3144'. [ 1089.273479][ T5912] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1089.455142][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.490955][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.528180][ T5912] usb 7-1: New USB device found, idVendor=8fc5, idProduct=b080, bcdDevice= 0.00 [ 1089.566224][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.625917][ T5912] usb 7-1: config 0 descriptor?? [ 1090.205687][T21774] batman_adv: batadv0: Adding interface: dummy0 [ 1090.224466][T21774] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.288426][T21774] batman_adv: batadv0: Interface activated: dummy0 [ 1090.301085][T21776] batadv0: mtu less than device minimum [ 1090.314448][T21776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1090.325614][T21776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1090.336647][T21776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1090.347738][T21776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1090.358787][T21776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1090.369818][T21776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1090.380860][T21776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1090.391877][T21776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1090.402930][T21776] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1090.700979][T21784] overlayfs: failed to clone upperpath [ 1092.237152][T21787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3155'. [ 1092.430596][ T5912] usbhid 7-1:0.0: can't add hid device: -71 [ 1092.437014][ T5912] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1092.453680][ T5912] usb 7-1: USB disconnect, device number 11 [ 1093.217665][T21806] overlayfs: failed to resolve './file1': -2 [ 1095.449365][T21839] overlay: Bad value for 'uuid' [ 1095.520791][T21840] trusted_key: encrypted_key: insufficient parameters specified [ 1095.533131][T21840] overlayfs: failed to resolve './file1': -2 [ 1096.820119][T21851] binder: 21850:21851 ioctl 4018620d 0 returned -22 [ 1097.012177][T21863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3177'. [ 1097.252342][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'. [ 1098.133468][T21882] netlink: 'syz.5.3184': attribute type 61 has an invalid length. [ 1099.891529][T21901] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 1099.930428][T21901] netlink: 'syz.6.3190': attribute type 2 has an invalid length. [ 1099.969007][T21904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3191'. [ 1100.728798][T21917] fuse: Bad value for 'fd' [ 1101.300273][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3200'. [ 1102.570978][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3203'. [ 1103.254724][T10995] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1104.533729][T10995] usb 7-1: Using ep0 maxpacket: 16 [ 1104.545085][T10995] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.564855][T10995] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1104.595288][T10995] usb 7-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1104.620834][T10995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.649688][T10995] usb 7-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 1104.677319][T10995] usb 7-1: Manufacturer: చ [ 1104.685930][T10995] usb 7-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋퓏䞥ﬤ었橾㓵砾욷䁌◲ [ 1104.771890][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3215'. [ 1106.003485][ T5912] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1106.216542][T21986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3220'. [ 1106.243797][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 1106.294388][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.313569][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.340072][ T5912] usb 2-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 1106.342828][T10995] usbhid 7-1:1.0: can't add hid device: -71 [ 1106.351091][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.362954][T10995] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1106.385777][T10995] usb 7-1: USB disconnect, device number 12 [ 1106.409389][ T5912] usb 2-1: config 0 descriptor?? [ 1107.295672][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3226'. [ 1108.069478][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 1108.193851][T22024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3233'. [ 1108.900722][ T5912] usbhid 2-1:0.0: can't add hid device: -71 [ 1108.937283][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1109.046531][ T5912] usb 2-1: USB disconnect, device number 57 [ 1109.147576][T22038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3237'. [ 1109.213485][T10990] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 1109.465296][T10990] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1110.659282][T10990] usb 7-1: config 0 has no interface number 0 [ 1110.690651][T10990] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1110.705053][T10990] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1110.722707][T10990] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1110.732242][T10990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.744198][T10990] usb 7-1: config 0 descriptor?? [ 1110.749997][T22033] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1110.772286][T10990] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1112.577922][T22055] ALSA: mixer_oss: invalid OSS volume 'C' [ 1112.627267][ T10] usb 7-1: USB disconnect, device number 13 [ 1113.063818][ T10] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1113.237728][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1113.273499][ T10] usb 7-1: config 0 has no interface number 0 [ 1113.290352][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1113.347670][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1113.378018][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1113.413427][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1113.449179][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1113.476012][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1113.513411][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1113.540364][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.561855][ T10] usb 7-1: config 0 descriptor?? [ 1113.581398][T22066] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1113.602335][T22066] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1113.662422][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1115.479671][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.672259][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.623446][ T92] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1116.773566][T10990] usb 7-1: USB disconnect, device number 14 [ 1116.793481][ T92] usb 6-1: Using ep0 maxpacket: 8 [ 1116.810486][ T92] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1116.814613][T10990] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1116.844275][ T92] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1116.883523][ T92] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1116.923653][ T92] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1116.953497][ T92] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1116.987099][ T92] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1117.017710][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.258375][ T92] usb 6-1: usb_control_msg returned -32 [ 1117.273647][ T92] usbtmc 6-1:16.0: can't read capabilities [ 1117.943476][T22090] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1117.993645][ T92] usb 6-1: USB disconnect, device number 37 [ 1118.403715][T10990] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1118.563491][T10990] usb 7-1: Using ep0 maxpacket: 16 [ 1118.641331][T10990] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.675459][ T1142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1118.691817][T10990] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1118.718190][T10990] usb 7-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1118.814601][T10990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.832402][T10990] usb 7-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 1118.926577][T10990] usb 7-1: Manufacturer: చ [ 1118.971912][T10990] usb 7-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋퓏䞥ﬤ었橾㓵砾욷䁌◲朑 [ 1120.848992][T10990] usbhid 7-1:1.0: can't add hid device: -71 [ 1120.902580][T10990] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1120.924023][T10990] usb 7-1: USB disconnect, device number 15 [ 1123.393451][ T5912] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1123.690143][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 1123.713505][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.733566][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.743543][ T5912] usb 7-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 1123.752708][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.794531][ T5912] usb 7-1: config 0 descriptor?? [ 1126.530462][ T5912] usbhid 7-1:0.0: can't add hid device: -71 [ 1126.563461][ T5912] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1126.634089][ T5912] usb 7-1: USB disconnect, device number 16 [ 1126.757236][T22224] overlayfs: missing 'lowerdir' [ 1127.952007][T22247] netlink: 'syz.5.3310': attribute type 61 has an invalid length. [ 1129.352954][T22259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3314'. [ 1129.495089][T22265] overlayfs: missing 'lowerdir' [ 1129.682092][T22270] binder: 22266:22270 ioctl 4018620d 0 returned -22 [ 1132.142814][T22293] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1132.898248][T22304] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1132.934601][T22304] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1134.970237][T22332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3339'. [ 1136.104173][T22340] binder: 22339:22340 ioctl 4018620d 0 returned -22 [ 1143.274808][T22368] vcan0: tx drop: invalid sa for name 0xffef000000000000 [ 1143.325817][T22370] binder: 22369:22370 ioctl 4018620d 0 returned -22 [ 1143.355652][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 1144.079000][T17585] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1144.351995][T17585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1144.367897][T17585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1144.390537][T17585] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1144.409425][T17585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1145.681939][ T30] audit: type=1400 audit(1758470067.924:983): avc: denied { watch_mount } for pid=22391 comm="syz.5.3359" path="/226" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1146.593704][T17585] Bluetooth: hci6: command tx timeout [ 1146.788278][T22383] chnl_net:caif_netlink_parms(): no params data found [ 1147.037339][T22383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.044697][T22383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.052076][T22383] bridge_slave_0: entered allmulticast mode [ 1147.123894][T22383] bridge_slave_0: entered promiscuous mode [ 1147.276278][T22383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.283864][T22383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.291138][T22383] bridge_slave_1: entered allmulticast mode [ 1147.299761][T22383] bridge_slave_1: entered promiscuous mode [ 1147.751598][T22432] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3367'. [ 1148.513826][T22434] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1148.775936][T17585] Bluetooth: hci6: command tx timeout [ 1149.255900][T22383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.301006][T22383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.445896][T22383] team0: Port device team_slave_0 added [ 1149.455433][T22383] team0: Port device team_slave_1 added [ 1149.617361][T22383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.644991][T22383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.741192][T22383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.785174][T22383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.814536][T22383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.887724][T22383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.034070][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1150.756451][T22383] hsr_slave_0: entered promiscuous mode [ 1150.778628][T22383] hsr_slave_1: entered promiscuous mode [ 1150.806460][T22383] debugfs: 'hsr0' already exists in 'hsr' [ 1150.812224][T22383] Cannot create hsr debugfs directory [ 1150.885568][T17585] Bluetooth: hci6: command tx timeout [ 1150.945931][ T1099] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57668 - 0 [ 1150.983713][ T1099] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1151.134826][ T1099] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57668 - 0 [ 1151.247093][ T1099] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1151.478006][T22458] netlink: 'syz.6.3371': attribute type 4 has an invalid length. [ 1151.519671][ T1099] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57668 - 0 [ 1151.560923][ T1099] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1152.344813][T22469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3373'. [ 1152.526149][ T1099] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57668 - 0 [ 1152.566982][ T1099] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1152.913507][T17585] Bluetooth: hci6: command tx timeout [ 1154.156380][T22488] overlayfs: failed to clone lowerpath [ 1154.934543][ T1099] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1157.014309][ T1099] bond3 (unregistering): (slave bridge2): Releasing active interface [ 1157.521011][ T1099] bond0 (unregistering): Released all slaves [ 1157.555263][ T1099] bond1 (unregistering): Released all slaves [ 1158.333193][ T1099] bond2 (unregistering): Released all slaves [ 1158.347277][ T1099] bond3 (unregistering): Released all slaves [ 1158.467045][T22504] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1158.522351][T22504] team0: Port device batadv1 added [ 1159.691184][ T30] audit: type=1400 audit(1758470081.954:984): avc: denied { bind } for pid=22501 comm="syz.6.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1159.863628][T22383] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1159.949930][T22383] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1159.995179][ T1099] IPVS: stopping master sync thread 10940 ... [ 1160.028487][T22383] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1160.098613][T22383] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1160.641217][ T30] audit: type=1326 audit(1758470082.894:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ba58ec29 code=0x7ffc0000 [ 1160.801931][ T30] audit: type=1326 audit(1758470082.894:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4ba58ec29 code=0x7ffc0000 [ 1160.833931][ T1099] batman_adv: batadv0: Removing interface: wlan0 [ 1160.950309][ T30] audit: type=1326 audit(1758470082.894:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ba58ec29 code=0x7ffc0000 [ 1161.138741][ T30] audit: type=1326 audit(1758470082.904:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4ba590b47 code=0x7ffc0000 [ 1161.277943][ T30] audit: type=1326 audit(1758470082.904:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb4ba590abc code=0x7ffc0000 [ 1161.482388][ T30] audit: type=1326 audit(1758470082.904:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb4ba5909f4 code=0x7ffc0000 [ 1161.576589][ T1099] hsr_slave_0: left promiscuous mode [ 1161.585779][ T1099] hsr_slave_1: left promiscuous mode [ 1161.599319][ T1099] veth0_macvtap: left allmulticast mode [ 1161.952856][ T30] audit: type=1326 audit(1758470082.904:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb4ba5909f4 code=0x7ffc0000 [ 1162.038029][ T30] audit: type=1326 audit(1758470082.904:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb4ba58d88a code=0x7ffc0000 [ 1162.138651][ T30] audit: type=1326 audit(1758470082.934:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22511 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ba58ec29 code=0x7ffc0000 [ 1162.195363][ T1099] pim6reg (unregistering): left allmulticast mode [ 1164.856394][T22551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'. [ 1169.989693][T22570] netlink: 'syz.6.3396': attribute type 61 has an invalid length. [ 1170.047556][T22383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.169818][T22383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.236378][T22580] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3400'. [ 1170.248228][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.255362][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.299395][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.306521][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.394821][T10995] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1170.431962][T22383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1170.442645][T22383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1170.553785][T10995] usb 2-1: Using ep0 maxpacket: 8 [ 1170.581881][T10995] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1170.633127][T10995] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1170.711618][T10995] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1170.828960][T10995] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1170.870329][T10995] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.941021][ T1099] IPVS: stop unused estimator thread 0... [ 1170.964136][T10995] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1171.021609][T10995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.328814][T22383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.339211][T10995] usb 2-1: usb_control_msg returned -32 [ 1171.363672][T10995] usbtmc 2-1:16.0: can't read capabilities [ 1171.468265][T10995] usb 2-1: USB disconnect, device number 58 [ 1172.211760][T22611] netlink: 'syz.4.3407': attribute type 61 has an invalid length. [ 1172.230379][T22383] veth0_vlan: entered promiscuous mode [ 1172.242596][T22383] veth1_vlan: entered promiscuous mode [ 1172.266078][T22383] veth0_macvtap: entered promiscuous mode [ 1172.275621][T22383] veth1_macvtap: entered promiscuous mode [ 1172.368863][T22383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.394197][T22615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3408'. [ 1172.418833][T22383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.452561][ T1008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.491880][ T1008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.506216][T22617] netlink: 129704 bytes leftover after parsing attributes in process `syz.4.3409'. [ 1172.536582][ T1008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.546015][ T1008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.611093][T18544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.624061][T18544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.651504][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.664085][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.798975][T22624] batman_adv: batadv0: Adding interface: dummy0 [ 1172.806104][T22624] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.835617][T22624] batman_adv: batadv0: Interface activated: dummy0 [ 1172.858044][T22627] net_ratelimit: 10 callbacks suppressed [ 1172.858057][T22627] batadv0: mtu less than device minimum [ 1172.872931][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1172.884293][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1172.895488][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1172.906828][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1172.918205][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1172.929058][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1172.939890][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1172.950719][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1172.961545][T22627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1174.345465][T22655] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3419'. [ 1174.654658][ T5912] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1174.704865][T22671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3420'. [ 1174.771994][T22670] batman_adv: batadv0: Interface deactivated: dummy0 [ 1174.801111][T22670] batman_adv: batadv0: Removing interface: dummy0 [ 1174.876399][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 1174.891729][ T5912] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1174.919688][ T5912] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1174.970434][ T5912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1174.996369][ T5912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1175.017965][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1175.071897][ T5912] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1175.128495][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.532360][ T5912] usb 7-1: usb_control_msg returned -32 [ 1175.547885][ T5912] usbtmc 7-1:16.0: can't read capabilities [ 1175.569935][ T5912] usb 7-1: USB disconnect, device number 17 [ 1175.733652][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1175.943566][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1175.954463][ T10] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1175.965810][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.977497][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.989357][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.001170][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.014436][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.026934][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.039533][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.051719][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.071319][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1176.096969][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1176.123779][ T10] usb 4-1: SerialNumber: syz [ 1176.136858][ T10] usb 4-1: config 0 descriptor?? [ 1176.148550][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47 [ 1176.361373][T22685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.395559][T22685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.414842][ T10] usb 4-1: USB disconnect, device number 19 [ 1176.420951][ T5207] bcm5974 4-1:0.0: could not read from device [ 1176.429256][T22685] input: syz1 as /devices/virtual/input/input48 [ 1176.473862][T22500] bcm5974 4-1:0.0: could not read from device [ 1176.820174][T10995] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1176.925265][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.931564][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.083480][T10995] usb 6-1: Using ep0 maxpacket: 16 [ 1177.113160][T10995] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.174610][T10995] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1177.198473][T10995] usb 6-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1177.226566][T10995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.246673][T10995] usb 6-1: Manufacturer: చ [ 1177.282595][T10995] usb 6-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋퓏䞥ﬤ었橾㓵砾욷䁌◲朑霴 [ 1177.373035][T22696] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3433'. [ 1177.921611][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1177.921627][ T30] audit: type=1400 audit(1758470100.184:1012): avc: denied { bind } for pid=22700 comm="syz.3.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1178.364365][ T30] audit: type=1400 audit(1758470100.614:1013): avc: denied { accept } for pid=22703 comm="syz.6.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1178.709782][ T30] audit: type=1400 audit(1758470100.624:1014): avc: denied { shutdown } for pid=22703 comm="syz.6.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1178.959237][T22709] syzkaller1: entered promiscuous mode [ 1179.025977][T22709] syzkaller1: entered allmulticast mode [ 1179.557945][T10995] usbhid 6-1:1.0: can't add hid device: -71 [ 1179.591544][T10995] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1179.628098][T10995] usb 6-1: USB disconnect, device number 38 [ 1180.759747][T22730] netlink: 179596 bytes leftover after parsing attributes in process `syz.5.3444'. [ 1180.940049][T22733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3445'. [ 1182.466538][ T1142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1184.983476][T10995] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1185.203434][T10995] usb 4-1: Using ep0 maxpacket: 32 [ 1185.230522][T10995] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.339779][T10995] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1185.415360][T10995] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1185.443625][T10995] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1185.486069][T10995] usb 4-1: Product: syz [ 1185.490275][T10995] usb 4-1: Manufacturer: syz [ 1185.527011][T10995] usb 4-1: SerialNumber: syz [ 1185.643519][T10995] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input49 [ 1185.945210][T10995] usb 4-1: USB disconnect, device number 20 [ 1186.045651][T10995] appletouch 4-1:1.0: input: appletouch disconnected [ 1186.832790][T22774] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1187.263388][ T5912] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1187.493388][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 1187.500336][ T5912] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.513753][ T5912] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1187.528225][ T5912] usb 4-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1187.538688][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.548906][ T5912] usb 4-1: Manufacturer: చ [ 1187.560370][ T5912] usb 4-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋퓏䞥ﬤ었橾㓵砾욷䁌◲朑霴 [ 1187.639902][T22789] No control pipe specified [ 1188.193413][T10995] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1188.343415][T10995] usb 7-1: Using ep0 maxpacket: 16 [ 1188.355500][T10995] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.386253][T10995] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1188.453193][T10995] usb 7-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1188.463777][T10995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.473499][T10995] usb 7-1: Product: য路㲢㙇揇ຩ퐟際ᮖ柵ᅁ축ോ盬킬ﭕ⑾㶢鱬窮┻휶ꋜ喕✔✏╹儀舾籍쯻痏鎔ḉ향쯨댲⼂鮌付衠鰲퇢ᘬ鴚閇鑦쉅誼㱇á [ 1188.623519][T10995] usb 7-1: Manufacturer: చ [ 1188.909840][T10995] usb 7-1: SerialNumber: 䐺럘者ݓ蓥⬱岸㠚ꪠ卓㒝侚㧷揄힇膹┣摣݉戯裊䆅軒ꋠ콶綡⨂뙪䢑⡚ﴡ韠儮껜ḯ❛胅苟쯋퓏䞥ﬤ었橾㓵砾욷䁌◲朑霴 [ 1188.988136][T22797] batman_adv: batadv0: Interface deactivated: dummy0 [ 1189.006437][T22797] batman_adv: batadv0: Removing interface: dummy0 [ 1189.150145][T22799] fuse: Bad value for 'group_id' [ 1189.165413][T22799] fuse: Bad value for 'group_id' [ 1190.445652][T22812] cgroup: name respecified [ 1190.588851][ T5912] usbhid 4-1:1.0: can't add hid device: -71 [ 1190.619745][ T5912] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1190.678684][ T5912] usb 4-1: USB disconnect, device number 21 [ 1190.843211][T22814] tipc: Enabling of bearer rejected, failed to enable media [ 1191.009233][T22817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3475'. [ 1191.011408][T22818] netlink: 'syz.5.3475': attribute type 21 has an invalid length. [ 1191.081834][T22818] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3475'. [ 1191.116932][T22818] netlink: 'syz.5.3475': attribute type 5 has an invalid length. [ 1191.147280][T22818] netlink: 'syz.5.3475': attribute type 6 has an invalid length. [ 1191.181105][T22818] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3475'. [ 1191.181139][T22817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3475'. [ 1193.495282][T10995] usbhid 7-1:1.0: can't add hid device: -71 [ 1193.529694][T10995] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1194.413735][T10995] usb 7-1: USB disconnect, device number 18 [ 1194.793490][T10995] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 1196.254719][T10995] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1196.290228][T10995] usb 7-1: config 0 has no interface number 0 [ 1196.299291][T10995] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1196.323357][T10995] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1196.363562][T10995] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1196.391564][T10995] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1196.394272][T22861] overlayfs: failed to clone upperpath [ 1196.413390][T10995] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1196.468230][T10995] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1196.512869][T10995] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1196.547340][T10995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.602587][T10995] usb 7-1: config 0 descriptor?? [ 1196.710578][T10995] usb 7-1: can't set config #0, error -71 [ 1196.764156][T10995] usb 7-1: USB disconnect, device number 19 [ 1196.973973][T22868] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3490'. [ 1197.762063][T22873] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1197.809719][T22868] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 1200.528244][ T5912] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 1200.799141][ T5912] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1200.927774][ T5912] usb 7-1: config 0 has no interface number 0 [ 1201.035736][ T5912] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1201.303558][ T5912] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1201.383376][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1201.456958][ T5912] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1201.487254][ T5912] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1201.510830][ T5912] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1201.733388][ T10] usb 4-1: device descriptor read/64, error -71 [ 1201.759445][ T5912] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1201.821464][ T5912] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1202.034489][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1202.193394][ T10] usb 4-1: device descriptor read/64, error -71 [ 1203.165220][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.226385][T22921] netlink: 'syz.5.3506': attribute type 12 has an invalid length. [ 1203.238582][T22921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3506'. [ 1203.262526][ T10] usb usb4-port1: attempt power cycle [ 1203.301366][ T5912] usb 7-1: config 0 descriptor?? [ 1203.354157][ T5912] usb 7-1: can't set config #0, error -71 [ 1203.372126][ T5912] usb 7-1: USB disconnect, device number 20 [ 1203.530608][T22927] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3509'. [ 1203.573809][ T5969] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1203.613383][ T5939] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1203.683544][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1203.714983][ T10] usb 4-1: device descriptor read/8, error -71 [ 1203.733389][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 1203.755802][ T5969] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1203.773381][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 1203.779673][ T5969] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1203.798139][ T5969] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1203.799532][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.819541][ T5969] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1203.846922][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.858414][ T5939] usb 6-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 1203.870107][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.894959][ T5969] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1203.922444][ T5939] usb 6-1: config 0 descriptor?? [ 1203.924833][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.973718][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1204.004318][ T10] usb 4-1: device descriptor read/8, error -71 [ 1204.182673][ T10] usb usb4-port1: unable to enumerate USB device [ 1204.203221][ T5969] usb 2-1: usb_control_msg returned -32 [ 1204.237857][ T5969] usbtmc 2-1:16.0: can't read capabilities [ 1204.348336][ T5969] usb 2-1: USB disconnect, device number 59 [ 1204.935530][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3514'. [ 1205.158660][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3514'. [ 1205.487392][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3514'. [ 1205.842090][T22957] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1206.521324][ T5939] usbhid 6-1:0.0: can't add hid device: -71 [ 1206.560557][ T5939] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1206.664734][ T5939] usb 6-1: USB disconnect, device number 39 [ 1206.760069][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3525'. [ 1206.852139][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3525'. [ 1206.923410][ T5969] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1206.943666][T10995] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1206.992421][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3525'. [ 1207.063399][ T5969] usb 2-1: device descriptor read/64, error -71 [ 1207.133400][T10995] usb 7-1: Using ep0 maxpacket: 8 [ 1207.156613][T10995] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1207.173016][T10995] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1207.209393][T10995] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1207.223387][T10995] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.281177][T10995] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1207.291972][T10995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.325179][ T5969] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1207.390010][T22991] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3527'. [ 1207.473507][ T5969] usb 2-1: device descriptor read/64, error -71 [ 1207.582749][T10995] usb 7-1: usb_control_msg returned -32 [ 1207.621304][T10995] usbtmc 7-1:16.0: can't read capabilities [ 1207.641008][ T5969] usb usb2-port1: attempt power cycle [ 1207.709551][T10995] usb 7-1: USB disconnect, device number 21 [ 1208.023513][ T5969] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1208.087064][ T5969] usb 2-1: device descriptor read/8, error -71 [ 1208.335161][ T5969] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1208.368855][ T5969] usb 2-1: device descriptor read/8, error -71 [ 1208.493939][ T5969] usb usb2-port1: unable to enumerate USB device [ 1208.841702][T23010] FAULT_INJECTION: forcing a failure. [ 1208.841702][T23010] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.863755][T23010] CPU: 0 UID: 0 PID: 23010 Comm: syz.6.3530 Not tainted syzkaller #0 PREEMPT(full) [ 1208.863782][T23010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1208.863792][T23010] Call Trace: [ 1208.863798][T23010] [ 1208.863805][T23010] dump_stack_lvl+0x16c/0x1f0 [ 1208.863833][T23010] should_fail_ex+0x512/0x640 [ 1208.863860][T23010] should_failslab+0xc2/0x120 [ 1208.863881][T23010] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1208.863901][T23010] ? dst_alloc+0x99/0x1a0 [ 1208.863924][T23010] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1208.863944][T23010] dst_alloc+0x99/0x1a0 [ 1208.863964][T23010] ip6_rt_cache_alloc+0x1f6/0x8c0 [ 1208.863981][T23010] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 1208.863998][T23010] ip6_pol_route+0xd7b/0x1230 [ 1208.864013][T23010] ? __pfx_ip6_pol_route+0x10/0x10 [ 1208.864031][T23010] ? find_held_lock+0x2b/0x80 [ 1208.864049][T23010] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1208.864062][T23010] fib6_rule_lookup+0x24c/0x720 [ 1208.864077][T23010] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1208.864088][T23010] ? __lock_acquire+0x62e/0x1ce0 [ 1208.864111][T23010] ? dev_get_by_index_rcu+0x102/0x140 [ 1208.864126][T23010] ip6_route_output_flags+0x1d0/0x640 [ 1208.864138][T23010] ip6_dst_lookup_tail.constprop.0+0x115a/0x2140 [ 1208.864157][T23010] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 1208.864171][T23010] ? find_held_lock+0x2b/0x80 [ 1208.864186][T23010] ? __lock_acquire+0x62e/0x1ce0 [ 1208.864204][T23010] ? do_pte_missing+0x56d/0x3ba0 [ 1208.864225][T23010] ip6_dst_lookup_flow+0x99/0x1d0 [ 1208.864238][T23010] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1208.864250][T23010] ? find_held_lock+0x2b/0x80 [ 1208.864264][T23010] ? rawv6_sendmsg+0xb6e/0x4820 [ 1208.864277][T23010] rawv6_sendmsg+0xe85/0x4820 [ 1208.864294][T23010] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1208.864305][T23010] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1208.864319][T23010] ? avc_has_perm+0x144/0x1f0 [ 1208.864331][T23010] ? __pfx_avc_has_perm+0x10/0x10 [ 1208.864343][T23010] ? do_user_addr_fault+0x829/0x1370 [ 1208.864367][T23010] ? __import_iovec+0x1dd/0x650 [ 1208.864384][T23010] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1208.864397][T23010] ? inet_sendmsg+0x119/0x140 [ 1208.864407][T23010] inet_sendmsg+0x119/0x140 [ 1208.864419][T23010] ____sys_sendmsg+0x973/0xc70 [ 1208.864437][T23010] ? copy_msghdr_from_user+0x10a/0x160 [ 1208.864451][T23010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.864470][T23010] ? __pfx__kstrtoull+0x10/0x10 [ 1208.864486][T23010] ___sys_sendmsg+0x134/0x1d0 [ 1208.864501][T23010] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.864522][T23010] ? find_held_lock+0x2b/0x80 [ 1208.864545][T23010] __sys_sendmmsg+0x200/0x420 [ 1208.864561][T23010] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1208.864579][T23010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1208.864602][T23010] ? fput+0x9b/0xd0 [ 1208.864617][T23010] ? ksys_write+0x1ac/0x250 [ 1208.864634][T23010] ? __pfx_ksys_write+0x10/0x10 [ 1208.864648][T23010] __x64_sys_sendmmsg+0x9c/0x100 [ 1208.864662][T23010] ? lockdep_hardirqs_on+0x7c/0x110 [ 1208.864676][T23010] do_syscall_64+0xcd/0x4e0 [ 1208.864692][T23010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.864704][T23010] RIP: 0033:0x7f40b7d8ec29 [ 1208.864714][T23010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1208.864725][T23010] RSP: 002b:00007f40b8c5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1208.864737][T23010] RAX: ffffffffffffffda RBX: 00007f40b7fd6180 RCX: 00007f40b7d8ec29 [ 1208.864744][T23010] RDX: 0400000000000174 RSI: 0000200000008380 RDI: 000000000000000a [ 1208.864751][T23010] RBP: 00007f40b8c5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.864757][T23010] R10: 0000000004008890 R11: 0000000000000246 R12: 0000000000000001 [ 1208.864764][T23010] R13: 00007f40b7fd6218 R14: 00007f40b7fd6180 R15: 00007ffda3471fc8 [ 1208.864778][T23010] [ 1211.690915][T23016] syzkaller0: entered promiscuous mode [ 1211.724562][T23016] syzkaller0: entered allmulticast mode [ 1212.022346][T23024] __nla_validate_parse: 1 callbacks suppressed [ 1212.028984][T23024] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3538'. [ 1212.155126][T23028] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1212.192016][T23028] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1214.426435][ T30] audit: type=1400 audit(1758470136.694:1015): avc: denied { ioctl } for pid=23058 comm="syz.6.3548" path="socket:[85793]" dev="sockfs" ino=85793 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1214.638494][T23061] net_ratelimit: 10 callbacks suppressed [ 1214.638502][T23061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1214.721976][T23063] netlink: 'syz.5.3549': attribute type 61 has an invalid length. [ 1215.048535][T23072] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3552'. [ 1215.967853][ T6669] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1219.171989][ T5969] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1222.451095][T10990] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1225.057698][ T5969] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1225.304757][T23173] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 1226.194992][ T5969] usb 6-1: Using ep0 maxpacket: 8 [ 1226.762681][ T5969] usb 6-1: device descriptor read/all, error -71 [ 1227.043579][T10995] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1228.971637][T10995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1228.991810][T10995] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1229.012358][T10995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.030332][T10995] usb 2-1: Product: syz [ 1229.035848][T10995] usb 2-1: Manufacturer: syz [ 1229.040530][T10995] usb 2-1: SerialNumber: syz [ 1229.086043][T10995] usb 2-1: config 0 descriptor?? [ 1229.427995][T23211] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1229.658578][T23213] netlink: 'syz.4.3594': attribute type 1 has an invalid length. [ 1229.697562][T23213] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1229.853856][ T30] audit: type=1326 audit(1758470152.094:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1230.004507][ T30] audit: type=1326 audit(1758470152.104:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1230.054310][ T30] audit: type=1326 audit(1758470152.104:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1230.138743][ T30] audit: type=1326 audit(1758470152.104:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1230.320823][ T30] audit: type=1326 audit(1758470152.104:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1230.379175][ T5969] usb 2-1: USB disconnect, device number 65 [ 1230.465515][ T30] audit: type=1326 audit(1758470152.104:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1230.545782][ T30] audit: type=1326 audit(1758470152.104:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1230.693673][ T30] audit: type=1326 audit(1758470152.104:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1230.814219][ T30] audit: type=1326 audit(1758470152.104:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1231.021347][ T30] audit: type=1326 audit(1758470152.104:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23175 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1232.479965][T23226] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.3598'. [ 1232.581978][T23226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3598'. [ 1232.730214][T23227] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1234.134759][T23235] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1234.141280][T23235] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1234.163752][T23235] vhci_hcd vhci_hcd.0: Device attached [ 1234.195669][T23240] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1234.433572][ T5912] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1234.876700][T23237] vhci_hcd: connection reset by peer [ 1234.943537][ T1008] vhci_hcd: stop threads [ 1235.107844][ T1008] vhci_hcd: release socket [ 1235.116909][ T1008] vhci_hcd: disconnect device [ 1236.348486][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1236.363770][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1236.373743][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1236.381420][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1236.391474][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1237.872518][ T1142] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.950714][T23259] chnl_net:caif_netlink_parms(): no params data found [ 1238.366000][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.374649][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.454661][T17585] Bluetooth: hci0: command tx timeout [ 1239.092734][ T1142] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.560520][ T5912] vhci_hcd: vhci_device speed not set [ 1239.635372][ T1142] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.656815][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3615'. [ 1239.708612][T23295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3615'. [ 1240.068934][ T1142] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.242766][T23259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.270978][T23259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.290218][T23259] bridge_slave_0: entered allmulticast mode [ 1240.316541][T23259] bridge_slave_0: entered promiscuous mode [ 1240.342805][T23259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.374724][T23259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.400758][T23259] bridge_slave_1: entered allmulticast mode [ 1240.415467][T23259] bridge_slave_1: entered promiscuous mode [ 1240.503359][ T5939] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 1240.513773][T17585] Bluetooth: hci0: command tx timeout [ 1240.708090][T23259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.805784][ T5939] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1240.874987][ T5939] usb 2-1: config 0 has no interface number 0 [ 1240.926238][ T5939] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1240.946122][T23259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.998059][ T5939] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1241.109420][ T5939] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1241.188465][T23259] team0: Port device team_slave_0 added [ 1241.217882][T23259] team0: Port device team_slave_1 added [ 1241.299603][ T5939] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1242.603473][T17585] Bluetooth: hci0: command tx timeout [ 1243.164621][T23259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.178794][T23259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.207729][ T5939] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1243.238208][ T5939] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1243.298656][ T5939] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1243.340782][T23259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.344035][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.389996][ T5939] usb 2-1: config 0 descriptor?? [ 1243.397078][ T1142] bridge_slave_1: left allmulticast mode [ 1243.402745][ T1142] bridge_slave_1: left promiscuous mode [ 1243.412121][ T5939] usb 2-1: can't set config #0, error -71 [ 1243.454544][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.458007][ T5939] usb 2-1: USB disconnect, device number 66 [ 1243.496005][ T1142] bridge_slave_0: left allmulticast mode [ 1243.518293][ T1142] bridge_slave_0: left promiscuous mode [ 1243.529339][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.697478][T17585] Bluetooth: hci0: command tx timeout [ 1246.458408][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.531389][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.599815][ T1142] bond0 (unregistering): Released all slaves [ 1246.645567][T23259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.672746][T23259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.851681][T23259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.886952][ T1142] tipc: Left network mode [ 1247.113528][T23259] hsr_slave_0: entered promiscuous mode [ 1247.130563][T23259] hsr_slave_1: entered promiscuous mode [ 1247.155695][T23259] debugfs: 'hsr0' already exists in 'hsr' [ 1247.172805][T23259] Cannot create hsr debugfs directory [ 1247.198777][T23342] overlayfs: failed to resolve './bus': -2 [ 1247.557320][ T1142] hsr_slave_0: left promiscuous mode [ 1247.581951][ T1142] hsr_slave_1: left promiscuous mode [ 1247.599243][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1247.613457][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1247.646548][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1247.683424][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.743908][ T1142] veth1_macvtap: left promiscuous mode [ 1247.753078][ T1142] veth0_macvtap: left promiscuous mode [ 1247.769951][ T1142] veth1_vlan: left promiscuous mode [ 1247.811385][ T1142] veth0_vlan: left promiscuous mode [ 1248.059814][ T1142] team0 (unregistering): Port device batadv1 removed [ 1249.679509][T23358] fuse: Bad value for 'user_id' [ 1249.689179][T23358] fuse: Bad value for 'user_id' [ 1249.873985][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1250.000446][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 1250.159595][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 1251.098902][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1251.098918][ T30] audit: type=1400 audit(1758470173.364:1059): avc: denied { unmount } for pid=23370 comm="syz.3.3634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1252.993472][ T5969] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1253.164720][ T5969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.204280][T23368] netlink: 'syz.1.3632': attribute type 61 has an invalid length. [ 1253.226279][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1253.253335][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1253.303342][ T5969] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1253.341557][ T5969] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1253.363388][ T5969] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1253.411259][ T5969] usb 4-1: Manufacturer: syz [ 1253.451652][ T5969] usb 4-1: config 0 descriptor?? [ 1253.765458][ T5969] rc_core: IR keymap rc-hauppauge not found [ 1253.781566][ T5969] Registered IR keymap rc-empty [ 1253.801988][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.822503][T23400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3641'. [ 1253.844753][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.862809][T23396] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3641'. [ 1253.875673][ T5969] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1253.900600][ T5969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 1253.940365][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1253.965223][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.973172][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.005287][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.033815][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.063667][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.094136][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.123887][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.144422][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.173807][ T1142] IPVS: stop unused estimator thread 0... [ 1254.177016][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.226008][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.254609][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.283804][ T5969] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1254.326779][ T5969] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1254.345784][ T5969] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1254.392291][ T5969] usb 4-1: USB disconnect, device number 26 [ 1254.622411][T23259] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1254.633845][T23259] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1254.642249][ T5939] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 1254.655989][T23259] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1254.668447][T23259] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1254.783186][T23259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.805775][ T5939] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1254.813295][T23259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.826235][ T5939] usb 6-1: config 0 has no interface number 0 [ 1254.829709][T22596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.839430][T22596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.847455][ T5939] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1254.878652][T23259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1254.897157][T23259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1254.899296][ T5939] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1254.920815][T22596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.927933][T22596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.943868][ T5939] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1254.987528][ T5939] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1255.009852][ T5939] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1255.037296][ T5939] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1255.059813][ T5939] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1255.069668][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.089071][ T5939] usb 6-1: config 0 descriptor?? [ 1255.104929][T23407] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1255.112827][T23407] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1255.146933][ T5939] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1255.261193][ T30] audit: type=1400 audit(1758470177.524:1060): avc: denied { ioctl } for pid=23414 comm="syz.1.3643" path="socket:[87765]" dev="sockfs" ino=87765 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1255.298527][T23425] netlink: 'syz.1.3643': attribute type 10 has an invalid length. [ 1255.317200][T23428] fuse: Bad value for 'fd' [ 1255.472268][T23425] veth0_vlan: left promiscuous mode [ 1255.490852][T23425] veth0_vlan: entered promiscuous mode [ 1255.519883][T23425] team0: Device veth0_vlan failed to register rx_handler [ 1257.091023][T23259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.678326][T23259] veth0_vlan: entered promiscuous mode [ 1257.690878][T23259] veth1_vlan: entered promiscuous mode [ 1257.729100][T23259] veth0_macvtap: entered promiscuous mode [ 1257.742142][T23259] veth1_macvtap: entered promiscuous mode [ 1257.770362][T23259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1257.789272][T23259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1257.805918][ T1008] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.835809][ T1008] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.887655][ T1008] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.911865][ T1008] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.961258][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.980416][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.012080][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.021410][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.126054][ T5939] usb 6-1: USB disconnect, device number 42 [ 1258.140945][ T5939] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1260.905850][T23464] [U] 1WT`8H$09\ [ 1260.921965][T23464] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 1260.991865][T23464] [U] 4XZ^Y)MC. OȞPOW [ 1261.039481][ T30] audit: type=1400 audit(1758470183.294:1061): avc: denied { execute } for pid=23461 comm="syz.3.3651" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1261.040977][T23464] [U] ä%Z [ 1261.156540][T23464] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 1261.258871][T23461] [U] P>BЍ̖Z% [ 1262.607288][T23473] netlink: 'syz.4.3652': attribute type 61 has an invalid length. [ 1264.148194][T23484] Bluetooth: MGMT ver 1.23 [ 1264.153672][ T30] audit: type=1326 audit(1758470186.424:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1264.423352][T10995] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1265.195678][ T30] audit: type=1326 audit(1758470186.424:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1265.219382][ T30] audit: type=1326 audit(1758470186.444:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1265.296444][ T30] audit: type=1326 audit(1758470186.444:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1265.357059][T10995] usb 2-1: Using ep0 maxpacket: 32 [ 1265.365084][ T30] audit: type=1326 audit(1758470186.444:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1265.365531][T10995] usb 2-1: config index 0 descriptor too short (expected 530, got 18) [ 1265.400998][T10995] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1265.409458][T10995] usb 2-1: config 0 has no interface number 0 [ 1265.440645][T10995] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1265.443565][ T30] audit: type=1326 audit(1758470186.454:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1265.451268][T10995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.508271][ T30] audit: type=1326 audit(1758470186.454:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1265.575218][ T30] audit: type=1326 audit(1758470186.454:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1265.616023][T23492] syzkaller0: entered promiscuous mode [ 1265.626587][T23492] syzkaller0: entered allmulticast mode [ 1265.649750][ T30] audit: type=1326 audit(1758470186.454:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1265.683515][T10995] usb 2-1: Product: syz [ 1265.687795][T10995] usb 2-1: Manufacturer: syz [ 1265.692785][T10995] usb 2-1: SerialNumber: syz [ 1265.713855][T10995] usb 2-1: config 0 descriptor?? [ 1265.775716][T10995] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 1266.020131][T10995] usb 2-1: USB disconnect, device number 67 [ 1266.046179][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1266.046193][ T30] audit: type=1326 audit(1758470188.314:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23481 comm="syz.1.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1dd8ec29 code=0x7ffc0000 [ 1266.195308][T17585] Bluetooth: hci0: command tx timeout [ 1270.949075][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3669'. [ 1271.158353][T17585] Bluetooth: hci6: command 0x0406 tx timeout [ 1273.493371][T10995] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1273.663442][T10995] usb 9-1: Using ep0 maxpacket: 8 [ 1273.672659][T10995] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1273.686643][T10995] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1273.729471][T10995] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1273.770006][T10995] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1273.800494][T10995] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1273.836797][T10995] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1273.865279][T10995] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.152823][T10995] usb 9-1: usb_control_msg returned -32 [ 1274.179147][T10995] usbtmc 9-1:16.0: can't read capabilities [ 1275.005243][T23574] usbtmc 9-1:16.0: INITIATE_CLEAR returned 0 [ 1275.254029][T23580] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3683'. [ 1275.543353][ T5969] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1275.734557][ T5969] usb 4-1: Using ep0 maxpacket: 32 [ 1275.747375][ T5969] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1275.766264][ T5969] usb 4-1: config 0 has no interface number 0 [ 1276.765710][ T5969] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.905026][ T92] usb 9-1: USB disconnect, device number 21 [ 1277.058982][ T5969] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.068856][ T5969] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1277.081102][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.092746][ T5969] usb 4-1: config 0 descriptor?? [ 1277.142767][T23601] vxcan1 speed is unknown, defaulting to 1000 [ 1277.167444][T23601] vxcan1 speed is unknown, defaulting to 1000 [ 1277.179787][T23601] vxcan1 speed is unknown, defaulting to 1000 [ 1277.207561][ T30] audit: type=1400 audit(1758470199.474:1114): avc: denied { setopt } for pid=23599 comm="syz.4.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1277.478550][ T92] vxcan1 speed is unknown, defaulting to 1000 [ 1277.487235][T23601] infiniband syz2: set down [ 1277.491853][T23601] infiniband syz2: added vxcan1 [ 1277.551717][T23601] RDS/IB: syz2: added [ 1277.560398][T23601] smc: adding ib device syz2 with port count 1 [ 1277.569198][T23601] smc: ib device syz2 port 1 has pnetid [ 1277.578433][ T92] vxcan1 speed is unknown, defaulting to 1000 [ 1277.587219][T23601] vxcan1 speed is unknown, defaulting to 1000 [ 1278.832833][ T5969] usbhid 4-1:0.1: can't add hid device: -71 [ 1278.839290][ T5969] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1278.875456][ T5969] usb 4-1: USB disconnect, device number 27 [ 1279.134723][T23601] vxcan1 speed is unknown, defaulting to 1000 [ 1279.439090][T23601] vxcan1 speed is unknown, defaulting to 1000 [ 1279.713700][T23601] vxcan1 speed is unknown, defaulting to 1000 [ 1279.723488][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1279.893344][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1279.924516][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1279.942908][ T10] usb 4-1: config 179 has no interface number 0 [ 1279.972227][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1280.026740][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1280.058719][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1280.152414][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1280.190106][T23601] vxcan1 speed is unknown, defaulting to 1000 [ 1280.196891][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1280.226318][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1280.265750][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.304399][T23623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1280.519093][T23601] vxcan1 speed is unknown, defaulting to 1000 [ 1280.573021][T23623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.619647][T23623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.902172][T23623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.914630][T23623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.931281][T23623] netlink: 'syz.3.3696': attribute type 12 has an invalid length. [ 1280.952313][T23623] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3696'. [ 1282.113448][ T1118] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1282.189518][ T10] usb 4-1: USB disconnect, device number 28 [ 1282.195476][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1282.195521][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1289.193334][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1289.383441][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1289.494277][T23688] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3715'. [ 1289.505551][ T10] usb 6-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1289.536419][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1289.708481][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1289.727992][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.773374][ T10] usb 6-1: Product: syz [ 1289.787724][ T10] usb 6-1: Manufacturer: syz [ 1289.807983][ T10] usb 6-1: SerialNumber: syz [ 1289.833944][ T10] usb 6-1: config 0 descriptor?? [ 1291.815878][T23703] 9pnet_fd: Insufficient options for proto=fd [ 1292.132201][ T30] audit: type=1400 audit(1758470214.394:1115): avc: denied { append } for pid=23702 comm="syz.1.3718" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1292.194491][T23705] 9pnet_fd: Insufficient options for proto=fd [ 1292.215347][T23705] /dev/sg0: Can't lookup blockdev [ 1292.518573][T23712] pim6reg: entered allmulticast mode [ 1292.529875][T23712] pim6reg: left allmulticast mode [ 1293.190175][T23721] wireguard0: entered promiscuous mode [ 1293.215194][T23721] wireguard0: entered allmulticast mode [ 1293.254188][T23724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23724 comm=syz.8.3722 [ 1293.493903][T23729] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1293.563628][ T5969] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1293.803649][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 1293.817218][ T5969] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1293.829061][ T5969] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1295.123400][ T5969] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1295.189272][ T5969] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1295.211321][ T5969] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1295.233449][ T5969] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1295.284878][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.555701][ T5969] usb 2-1: usb_control_msg returned -32 [ 1295.576553][ T5969] usbtmc 2-1:16.0: can't read capabilities [ 1296.320779][ T5969] usb 6-1: USB disconnect, device number 43 [ 1296.463696][T23747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47376 sclass=netlink_route_socket pid=23747 comm=syz.4.3731 [ 1298.027973][ T92] usb 2-1: USB disconnect, device number 68 [ 1299.112967][T23765] vxcan1 speed is unknown, defaulting to 1000 [ 1299.138734][ T30] audit: type=1804 audit(1758470221.374:1116): pid=23766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3735" name="/newroot/302/file0" dev="tmpfs" ino=1635 res=1 errno=0 [ 1299.812356][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.856361][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.808482][ T5939] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1300.993764][ T5939] usb 9-1: Using ep0 maxpacket: 32 [ 1301.015550][ T5939] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1301.045198][ T5939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.144273][ T5939] usb 9-1: config 0 descriptor?? [ 1301.172761][ T5939] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1301.726767][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1301.736150][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1301.745791][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1301.755747][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1301.765216][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1301.775369][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1301.785161][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1301.794912][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1301.806771][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1301.816712][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1301.994045][T23780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.016501][T23780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.029158][ T5939] gspca_sq930x: ucbus_write failed -110 [ 1302.053413][ T5939] sq930x 9-1:0.0: probe with driver sq930x failed with error -110 [ 1302.742712][T23793] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 1302.750949][T23797] lo speed is unknown, defaulting to 1000 [ 1302.765879][T23797] lo speed is unknown, defaulting to 1000 [ 1302.771991][T23797] lo speed is unknown, defaulting to 1000 [ 1302.782684][T23797] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1302.798001][T23797] lo speed is unknown, defaulting to 1000 [ 1302.804553][T23797] lo speed is unknown, defaulting to 1000 [ 1302.811413][T23797] lo speed is unknown, defaulting to 1000 [ 1302.817968][T23797] lo speed is unknown, defaulting to 1000 [ 1302.825524][T23797] lo speed is unknown, defaulting to 1000 [ 1302.831954][T23797] lo speed is unknown, defaulting to 1000 [ 1302.858267][ T30] audit: type=1400 audit(1758470225.124:1117): avc: denied { mount } for pid=23779 comm="syz.8.3739" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1303.913316][T10991] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1304.103445][T10991] usb 2-1: Using ep0 maxpacket: 8 [ 1304.128555][T10991] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1304.142872][T10991] usb 2-1: config 179 has no interface number 0 [ 1304.250646][T10991] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1304.437091][ T5939] usb 9-1: USB disconnect, device number 22 [ 1304.447108][T10991] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1304.475674][T10991] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1304.513124][ T30] audit: type=1400 audit(1758470226.774:1118): avc: denied { map } for pid=23808 comm="syz.8.3745" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1304.527642][T10991] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1304.875803][T10991] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1305.008240][T10991] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1305.077946][T10991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.148353][T23806] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1305.745410][T23806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.883454][T23806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.113658][T23806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.178899][T23806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.418179][ T5939] usb 2-1: USB disconnect, device number 69 [ 1306.418226][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1306.432962][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1307.119906][T23824] netlink: 'syz.3.3750': attribute type 1 has an invalid length. [ 1307.276930][T23826] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1307.290704][T23826] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1307.467581][T23827] gretap1: entered promiscuous mode [ 1307.520032][T23827] bond1: (slave gretap1): making interface the new active one [ 1307.535573][T23827] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1307.573334][T10995] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1307.804829][T10995] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.865268][T10995] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1307.907671][T10995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.973661][T10995] usb 2-1: config 0 descriptor?? [ 1308.015302][T10995] pwc: Askey VC010 type 2 USB webcam detected. [ 1308.408936][T10995] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1308.476693][T10995] pwc: recv_control_msg error -32 req 02 val 2700 [ 1308.496547][T10995] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1308.523838][T10995] pwc: recv_control_msg error -32 req 04 val 1000 [ 1308.562039][T10995] pwc: recv_control_msg error -32 req 04 val 1300 [ 1308.588595][T10995] pwc: recv_control_msg error -32 req 04 val 1400 [ 1308.616593][T10995] pwc: recv_control_msg error -32 req 02 val 2000 [ 1312.143288][ T10] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1312.372686][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1312.523438][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1312.543347][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1312.555985][ T10] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1312.588607][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.631660][ T10] usb 9-1: Product: syz [ 1312.685778][ T10] usb 9-1: Manufacturer: syz [ 1312.706861][ T10] usb 9-1: SerialNumber: syz [ 1312.763974][ T10] usb 9-1: config 0 descriptor?? [ 1312.820919][T23855] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1312.875579][ T10] usb 9-1: ucan: probing device on interface #0 [ 1312.924106][ T10] usb 9-1: ucan: invalid in_ep MaxPacketSize [ 1312.970471][ T10] usb 9-1: ucan: probe failed; try to update the device firmware [ 1313.280060][ T10] usb 9-1: USB disconnect, device number 23 [ 1313.874101][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1314.153311][ T10] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1314.220497][T10995] pwc: recv_control_msg error -110 req 04 val 1500 [ 1314.253688][T10995] pwc: recv_control_msg error -32 req 02 val 2500 [ 1314.263346][T10995] pwc: recv_control_msg error -32 req 02 val 2400 [ 1314.293542][T10995] pwc: recv_control_msg error -32 req 02 val 2600 [ 1314.323831][T10995] pwc: recv_control_msg error -32 req 02 val 2900 [ 1314.335052][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1314.348715][ T10] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1314.369301][T10995] pwc: recv_control_msg error -32 req 02 val 2800 [ 1314.387553][ T10] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1314.388082][T10995] pwc: recv_control_msg error -32 req 04 val 1100 [ 1314.420515][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1314.435573][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1314.449444][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1314.473632][T10995] pwc: recv_control_msg error -32 req 04 val 1200 [ 1314.479259][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1314.494358][ T10] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1314.514751][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.532334][ T10] usb 9-1: config 0 descriptor?? [ 1314.551876][T10995] pwc: Registered as video103. [ 1314.698748][T10995] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input51 [ 1314.744559][ T10] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1314.973324][ T30] audit: type=1400 audit(1758470237.234:1119): avc: denied { read write } for pid=23860 comm="syz.8.3759" name="lp0" dev="devtmpfs" ino=3802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1315.192092][T23880] fuse: Unknown parameter '6' [ 1315.453943][ T30] audit: type=1400 audit(1758470237.234:1120): avc: denied { open } for pid=23860 comm="syz.8.3759" path="/dev/usb/lp0" dev="devtmpfs" ino=3802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1315.550094][ T92] usb 9-1: USB disconnect, device number 24 [ 1315.569324][ T92] usblp0: removed [ 1316.082945][ T92] usb 2-1: USB disconnect, device number 70 [ 1316.222054][T23887] 9pnet_fd: Insufficient options for proto=fd [ 1316.435744][T23894] netlink: 'syz.8.3767': attribute type 1 has an invalid length. [ 1316.455611][T23894] nbd: error processing sock list [ 1316.733417][ T92] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1316.981352][ T92] usb 9-1: config index 0 descriptor too short (expected 65157, got 45) [ 1317.026394][ T92] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 1317.065200][ T92] usb 9-1: config 1 has no interface number 0 [ 1317.071329][ T92] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1317.153585][ T92] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1317.220021][ T92] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1317.243294][ T92] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.251307][ T92] usb 9-1: Product: syz [ 1317.283338][ T92] usb 9-1: Manufacturer: syz [ 1317.287959][ T92] usb 9-1: SerialNumber: syz [ 1317.310426][T23891] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1317.344954][ T92] usb 9-1: Error in usbnet_get_endpoints (-22) [ 1319.349088][ T92] usb 9-1: USB disconnect, device number 25 [ 1322.347709][T23923] 9pnet_fd: Insufficient options for proto=fd [ 1322.742167][T23934] __nla_validate_parse: 43 callbacks suppressed [ 1322.742185][T23934] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1322.758638][T23934] openvswitch: netlink: Flow key attr not present in new flow. [ 1322.830500][T23935] netlink: 'syz.1.3780': attribute type 61 has an invalid length. [ 1324.220600][T23938] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1324.469730][ T30] audit: type=1400 audit(1758470246.734:1121): avc: denied { firmware_load } for pid=23933 comm="syz.5.3781" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1324.509496][T23944] FAULT_INJECTION: forcing a failure. [ 1324.509496][T23944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.511060][T23944] [ 1324.511066][T23944] ====================================================== [ 1324.511071][T23944] WARNING: possible circular locking dependency detected [ 1324.511076][T23944] syzkaller #0 Not tainted [ 1324.511082][T23944] ------------------------------------------------------ [ 1324.511086][T23944] syz.1.3783/23944 is trying to acquire lock: [ 1324.511091][T23944] ffffffff8e4cebc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 1324.511122][T23944] [ 1324.511122][T23944] but task is already holding lock: [ 1324.511125][T23944] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1324.511159][T23944] [ 1324.511159][T23944] which lock already depends on the new lock. [ 1324.511159][T23944] [ 1324.511163][T23944] [ 1324.511163][T23944] the existing dependency chain (in reverse order) is: [ 1324.511167][T23944] [ 1324.511167][T23944] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1324.511180][T23944] _raw_spin_lock_nested+0x31/0x40 [ 1324.511193][T23944] raw_spin_rq_lock_nested+0x29/0x130 [ 1324.511205][T23944] task_rq_lock+0xcf/0x490 [ 1324.511217][T23944] cgroup_move_task+0x81/0x2a0 [ 1324.511232][T23944] css_set_move_task+0x288/0x5f0 [ 1324.511242][T23944] cgroup_post_fork+0x201/0x9e0 [ 1324.511254][T23944] copy_process+0x5cfa/0x7690 [ 1324.511269][T23944] kernel_clone+0xfc/0x930 [ 1324.511282][T23944] user_mode_thread+0xc7/0x110 [ 1324.511296][T23944] rest_init+0x23/0x2b0 [ 1324.511312][T23944] start_kernel+0x3ee/0x4d0 [ 1324.511325][T23944] x86_64_start_reservations+0x18/0x30 [ 1324.511338][T23944] x86_64_start_kernel+0x130/0x190 [ 1324.511350][T23944] common_startup_64+0x13e/0x148 [ 1324.511362][T23944] [ 1324.511362][T23944] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1324.511375][T23944] _raw_spin_lock_irqsave+0x3a/0x60 [ 1324.511386][T23944] try_to_wake_up+0xb7/0x1870 [ 1324.511401][T23944] __wake_up_common+0x135/0x1f0 [ 1324.511417][T23944] __wake_up+0x31/0x60 [ 1324.511430][T23944] tty_port_default_wakeup+0x2a/0x40 [ 1324.511444][T23944] serial8250_tx_chars+0x68e/0x860 [ 1324.511459][T23944] serial8250_handle_irq+0x761/0xcb0 [ 1324.511474][T23944] serial8250_default_handle_irq+0x9a/0x250 [ 1324.511489][T23944] serial8250_interrupt+0xf5/0x1b0 [ 1324.511505][T23944] __handle_irq_event_percpu+0x22c/0x7d0 [ 1324.511518][T23944] handle_irq_event+0xab/0x1e0 [ 1324.511530][T23944] handle_edge_irq+0x3ca/0x9e0 [ 1324.511541][T23944] __common_interrupt+0xcd/0x2f0 [ 1324.511556][T23944] common_interrupt+0xba/0xe0 [ 1324.511574][T23944] asm_common_interrupt+0x26/0x40 [ 1324.511584][T23944] pv_native_safe_halt+0xf/0x20 [ 1324.511596][T23944] default_idle+0x13/0x20 [ 1324.511610][T23944] default_idle_call+0x6d/0xb0 [ 1324.511625][T23944] do_idle+0x391/0x510 [ 1324.511638][T23944] cpu_startup_entry+0x4f/0x60 [ 1324.511650][T23944] start_secondary+0x21d/0x2b0 [ 1324.511666][T23944] common_startup_64+0x13e/0x148 [ 1324.511677][T23944] [ 1324.511677][T23944] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1324.511690][T23944] _raw_spin_lock_irqsave+0x3a/0x60 [ 1324.511702][T23944] __wake_up+0x1c/0x60 [ 1324.511715][T23944] tty_port_default_wakeup+0x2a/0x40 [ 1324.511728][T23944] serial8250_tx_chars+0x68e/0x860 [ 1324.511742][T23944] serial8250_handle_irq+0x761/0xcb0 [ 1324.511757][T23944] serial8250_default_handle_irq+0x9a/0x250 [ 1324.511773][T23944] serial8250_interrupt+0xf5/0x1b0 [ 1324.511788][T23944] __handle_irq_event_percpu+0x22c/0x7d0 [ 1324.511800][T23944] handle_irq_event+0xab/0x1e0 [ 1324.511812][T23944] handle_edge_irq+0x3ca/0x9e0 [ 1324.511824][T23944] __common_interrupt+0xcd/0x2f0 [ 1324.511838][T23944] common_interrupt+0xba/0xe0 [ 1324.511853][T23944] asm_common_interrupt+0x26/0x40 [ 1324.511863][T23944] pv_native_safe_halt+0xf/0x20 [ 1324.511875][T23944] default_idle+0x13/0x20 [ 1324.511889][T23944] default_idle_call+0x6d/0xb0 [ 1324.511904][T23944] do_idle+0x391/0x510 [ 1324.511915][T23944] cpu_startup_entry+0x4f/0x60 [ 1324.511928][T23944] start_secondary+0x21d/0x2b0 [ 1324.511943][T23944] common_startup_64+0x13e/0x148 [ 1324.511954][T23944] [ 1324.511954][T23944] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1324.511967][T23944] _raw_spin_lock_irqsave+0x3a/0x60 [ 1324.511978][T23944] serial8250_console_write+0x181/0x1890 [ 1324.511994][T23944] console_flush_all+0x801/0xc60 [ 1324.512006][T23944] console_unlock+0xd8/0x210 [ 1324.512017][T23944] vprintk_emit+0x418/0x6d0 [ 1324.512029][T23944] _printk+0xc7/0x100 [ 1324.512037][T23944] register_console+0xc2d/0x11b0 [ 1324.512050][T23944] univ8250_console_init+0x5f/0x90 [ 1324.512064][T23944] console_init+0x14f/0x680 [ 1324.512077][T23944] start_kernel+0x29f/0x4d0 [ 1324.512088][T23944] x86_64_start_reservations+0x18/0x30 [ 1324.512100][T23944] x86_64_start_kernel+0x130/0x190 [ 1324.512112][T23944] common_startup_64+0x13e/0x148 [ 1324.512123][T23944] [ 1324.512123][T23944] -> #0 (console_owner){-.-.}-{0:0}: [ 1324.512136][T23944] __lock_acquire+0x12a6/0x1ce0 [ 1324.512157][T23944] lock_acquire+0x179/0x350 [ 1324.512165][T23944] console_lock_spinning_enable+0xb0/0xd0 [ 1324.512177][T23944] console_flush_all+0x7aa/0xc60 [ 1324.512189][T23944] console_unlock+0xd8/0x210 [ 1324.512200][T23944] vprintk_emit+0x418/0x6d0 [ 1324.512212][T23944] _printk+0xc7/0x100 [ 1324.512220][T23944] should_fail_ex+0x4e7/0x640 [ 1324.512233][T23944] strncpy_from_user+0x3b/0x2e0 [ 1324.512244][T23944] strncpy_from_user_nofault+0x7f/0x180 [ 1324.512257][T23944] bpf_bprintf_prepare+0xe90/0x13f0 [ 1324.512274][T23944] bpf_trace_printk+0xda/0x190 [ 1324.512284][T23944] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1324.512292][T23944] bpf_trace_run2+0x236/0x590 [ 1324.512302][T23944] __bpf_trace_contention_begin+0xc9/0x110 [ 1324.512318][T23944] trace_contention_begin.constprop.0+0xde/0x160 [ 1324.512329][T23944] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1324.512343][T23944] do_raw_spin_lock+0x20e/0x2b0 [ 1324.512353][T23944] raw_spin_rq_lock_nested+0x7e/0x130 [ 1324.512365][T23944] __schedule+0x307/0x5de0 [ 1324.512376][T23944] preempt_schedule_common+0x44/0xc0 [ 1324.512387][T23944] preempt_schedule_thunk+0x16/0x30 [ 1324.512402][T23944] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1324.512413][T23944] __debug_object_init+0x2de/0x3d0 [ 1324.512423][T23944] timer_init_key+0x2f/0x60 [ 1324.512439][T23944] rxrpc_lookup_local+0x710/0x1220 [ 1324.512454][T23944] rxrpc_sendmsg+0x37e/0x680 [ 1324.512469][T23944] ____sys_sendmsg+0xa95/0xc70 [ 1324.512485][T23944] ___sys_sendmsg+0x134/0x1d0 [ 1324.512497][T23944] __sys_sendmsg+0x16d/0x220 [ 1324.512509][T23944] do_syscall_64+0xcd/0x4e0 [ 1324.512526][T23944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.512536][T23944] [ 1324.512536][T23944] other info that might help us debug this: [ 1324.512536][T23944] [ 1324.512539][T23944] Chain exists of: [ 1324.512539][T23944] console_owner --> &p->pi_lock --> &rq->__lock [ 1324.512539][T23944] [ 1324.512554][T23944] Possible unsafe locking scenario: [ 1324.512554][T23944] [ 1324.512557][T23944] CPU0 CPU1 [ 1324.512560][T23944] ---- ---- [ 1324.512563][T23944] lock(&rq->__lock); [ 1324.512570][T23944] lock(&p->pi_lock); [ 1324.512577][T23944] lock(&rq->__lock); [ 1324.512584][T23944] lock(console_owner); [ 1324.512590][T23944] [ 1324.512590][T23944] *** DEADLOCK *** [ 1324.512590][T23944] [ 1324.512593][T23944] 6 locks held by syz.1.3783/23944: [ 1324.512599][T23944] #0: ffff888022bc8258 (sk_lock-AF_RXRPC){+.+.}-{0:0}, at: rxrpc_sendmsg+0x114/0x680 [ 1324.512628][T23944] #1: ffff8880330681e8 (&rxnet->local_mutex){+.+.}-{4:4}, at: rxrpc_lookup_local+0xca/0x1220 [ 1324.512656][T23944] #2: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1324.512681][T23944] #3: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 1324.512705][T23944] #4: ffffffff8e5af000 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1324.512727][T23944] #5: ffffffff8e5af070 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1324.512752][T23944] [ 1324.512752][T23944] stack backtrace: [ 1324.512758][T23944] CPU: 0 UID: 0 PID: 23944 Comm: syz.1.3783 Not tainted syzkaller #0 PREEMPT(full) [ 1324.512770][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1324.512777][T23944] Call Trace: [ 1324.512781][T23944] [ 1324.512785][T23944] dump_stack_lvl+0x116/0x1f0 [ 1324.512800][T23944] print_circular_bug+0x275/0x350 [ 1324.512816][T23944] check_noncircular+0x14c/0x170 [ 1324.512834][T23944] __lock_acquire+0x12a6/0x1ce0 [ 1324.512854][T23944] lock_acquire+0x179/0x350 [ 1324.512862][T23944] ? console_lock_spinning_enable+0x9f/0xd0 [ 1324.512876][T23944] ? console_lock_spinning_enable+0x88/0xd0 [ 1324.512890][T23944] console_lock_spinning_enable+0xb0/0xd0 [ 1324.512902][T23944] ? console_lock_spinning_enable+0x9f/0xd0 [ 1324.512915][T23944] console_flush_all+0x7aa/0xc60 [ 1324.512929][T23944] ? __pfx_console_flush_all+0x10/0x10 [ 1324.512944][T23944] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1324.512960][T23944] console_unlock+0xd8/0x210 [ 1324.512972][T23944] ? __pfx_console_unlock+0x10/0x10 [ 1324.512985][T23944] ? do_raw_spin_unlock+0xa0/0x230 [ 1324.512997][T23944] ? _printk+0xc7/0x100 [ 1324.513006][T23944] ? __down_trylock_console_sem+0xb0/0x140 [ 1324.513018][T23944] vprintk_emit+0x418/0x6d0 [ 1324.513031][T23944] ? __pfx_vprintk_emit+0x10/0x10 [ 1324.513045][T23944] ? ring_buffer_lock_reserve+0x6ca/0x11b0 [ 1324.513064][T23944] _printk+0xc7/0x100 [ 1324.513073][T23944] ? __pfx__printk+0x10/0x10 [ 1324.513083][T23944] ? __pfx____ratelimit+0x10/0x10 [ 1324.513098][T23944] should_fail_ex+0x4e7/0x640 [ 1324.513111][T23944] strncpy_from_user+0x3b/0x2e0 [ 1324.513124][T23944] strncpy_from_user_nofault+0x7f/0x180 [ 1324.513138][T23944] bpf_bprintf_prepare+0xe90/0x13f0 [ 1324.513160][T23944] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1324.513176][T23944] ? __pfx_bstr_printf+0x10/0x10 [ 1324.513192][T23944] ? bpf_trace_run2+0x3e1/0x590 [ 1324.513208][T23944] bpf_trace_printk+0xda/0x190 [ 1324.513221][T23944] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1324.513237][T23944] ? bpf_trace_run2+0x3e1/0x590 [ 1324.513256][T23944] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1324.513268][T23944] bpf_trace_run2+0x236/0x590 [ 1324.513284][T23944] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1324.513303][T23944] __bpf_trace_contention_begin+0xc9/0x110 [ 1324.513323][T23944] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1324.513341][T23944] ? ring_buffer_unlock_commit+0x2e8/0x620 [ 1324.513354][T23944] trace_contention_begin.constprop.0+0xde/0x160 [ 1324.513367][T23944] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1324.513382][T23944] ? __lock_acquire+0xb97/0x1ce0 [ 1324.513399][T23944] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1324.513416][T23944] do_raw_spin_lock+0x20e/0x2b0 [ 1324.513428][T23944] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1324.513439][T23944] ? rcu_qs+0x2b/0xe0 [ 1324.513452][T23944] ? rcu_note_context_switch+0x192/0x1e00 [ 1324.513467][T23944] raw_spin_rq_lock_nested+0x7e/0x130 [ 1324.513480][T23944] ? preempt_schedule_common+0x44/0xc0 [ 1324.513493][T23944] __schedule+0x307/0x5de0 [ 1324.513507][T23944] ? stack_trace_save+0x8e/0xc0 [ 1324.513522][T23944] ? __pfx_stack_trace_save+0x10/0x10 [ 1324.513537][T23944] ? __pfx___schedule+0x10/0x10 [ 1324.513548][T23944] ? __lock_acquire+0xb97/0x1ce0 [ 1324.513566][T23944] ? mark_held_locks+0x49/0x80 [ 1324.513582][T23944] ? irqentry_exit+0x3b/0x90 [ 1324.513595][T23944] ? lockdep_hardirqs_on+0x7c/0x110 [ 1324.513609][T23944] ? preempt_schedule_thunk+0x16/0x30 [ 1324.513624][T23944] preempt_schedule_common+0x44/0xc0 [ 1324.513637][T23944] preempt_schedule_thunk+0x16/0x30 [ 1324.513653][T23944] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1324.513665][T23944] __debug_object_init+0x2de/0x3d0 [ 1324.513676][T23944] ? __pfx___debug_object_init+0x10/0x10 [ 1324.513688][T23944] ? find_held_lock+0x2b/0x80 [ 1324.513700][T23944] ? lockdep_init_map_type+0x5c/0x280 [ 1324.513711][T23944] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 1324.513727][T23944] timer_init_key+0x2f/0x60 [ 1324.513744][T23944] rxrpc_lookup_local+0x710/0x1220 [ 1324.513760][T23944] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1324.513776][T23944] ? __local_bh_enable_ip+0xa4/0x120 [ 1324.513791][T23944] rxrpc_sendmsg+0x37e/0x680 [ 1324.513808][T23944] ____sys_sendmsg+0xa95/0xc70 [ 1324.513825][T23944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1324.513844][T23944] ___sys_sendmsg+0x134/0x1d0 [ 1324.513857][T23944] ? __pfx____sys_sendmsg+0x10/0x10 [ 1324.513878][T23944] __sys_sendmsg+0x16d/0x220 [ 1324.513891][T23944] ? __pfx___sys_sendmsg+0x10/0x10 [ 1324.513907][T23944] do_syscall_64+0xcd/0x4e0 [ 1324.513922][T23944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.513933][T23944] RIP: 0033:0x7f2d1dd8ec29 [ 1324.513943][T23944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.513954][T23944] RSP: 002b:00007f2d1eb38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1324.513964][T23944] RAX: ffffffffffffffda RBX: 00007f2d1dfd6090 RCX: 00007f2d1dd8ec29 [ 1324.513971][T23944] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1324.513978][T23944] RBP: 00007f2d1eb38090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.513985][T23944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.513991][T23944] R13: 00007f2d1dfd6128 R14: 00007f2d1dfd6090 R15: 00007ffe601cf0a8 [ 1324.514001][T23944] [ 1325.834475][T23944] CPU: 0 UID: 0 PID: 23944 Comm: syz.1.3783 Not tainted syzkaller #0 PREEMPT(full) [ 1325.834498][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1325.834508][T23944] Call Trace: [ 1325.834513][T23944] [ 1325.834520][T23944] dump_stack_lvl+0x116/0x1f0 [ 1325.834543][T23944] should_fail_ex+0x512/0x640 [ 1325.834563][T23944] strncpy_from_user+0x3b/0x2e0 [ 1325.834580][T23944] strncpy_from_user_nofault+0x7f/0x180 [ 1325.834599][T23944] bpf_bprintf_prepare+0xe90/0x13f0 [ 1325.834624][T23944] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1325.834646][T23944] ? __pfx_bstr_printf+0x10/0x10 [ 1325.834667][T23944] ? bpf_trace_run2+0x3e1/0x590 [ 1325.834681][T23944] bpf_trace_printk+0xda/0x190 [ 1325.834695][T23944] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1325.834709][T23944] ? bpf_trace_run2+0x3e1/0x590 [ 1325.834726][T23944] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1325.834738][T23944] bpf_trace_run2+0x236/0x590 [ 1325.834753][T23944] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1325.834770][T23944] __bpf_trace_contention_begin+0xc9/0x110 [ 1325.834794][T23944] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1325.834818][T23944] ? ring_buffer_unlock_commit+0x2e8/0x620 [ 1325.834836][T23944] trace_contention_begin.constprop.0+0xde/0x160 [ 1325.834853][T23944] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1325.834874][T23944] ? __lock_acquire+0xb97/0x1ce0 [ 1325.834896][T23944] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1325.834918][T23944] do_raw_spin_lock+0x20e/0x2b0 [ 1325.834933][T23944] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1325.834948][T23944] ? rcu_qs+0x2b/0xe0 [ 1325.834965][T23944] ? rcu_note_context_switch+0x192/0x1e00 [ 1325.834985][T23944] raw_spin_rq_lock_nested+0x7e/0x130 [ 1325.835003][T23944] ? preempt_schedule_common+0x44/0xc0 [ 1325.835019][T23944] __schedule+0x307/0x5de0 [ 1325.835038][T23944] ? stack_trace_save+0x8e/0xc0 [ 1325.835057][T23944] ? __pfx_stack_trace_save+0x10/0x10 [ 1325.835076][T23944] ? __pfx___schedule+0x10/0x10 [ 1325.835091][T23944] ? __lock_acquire+0xb97/0x1ce0 [ 1325.835113][T23944] ? mark_held_locks+0x49/0x80 [ 1325.835134][T23944] ? irqentry_exit+0x3b/0x90 [ 1325.835156][T23944] ? lockdep_hardirqs_on+0x7c/0x110 [ 1325.835173][T23944] ? preempt_schedule_thunk+0x16/0x30 [ 1325.835194][T23944] preempt_schedule_common+0x44/0xc0 [ 1325.835211][T23944] preempt_schedule_thunk+0x16/0x30 [ 1325.835232][T23944] _raw_spin_unlock_irqrestore+0x61/0x80 [ 1325.835248][T23944] __debug_object_init+0x2de/0x3d0 [ 1325.835263][T23944] ? __pfx___debug_object_init+0x10/0x10 [ 1325.835277][T23944] ? find_held_lock+0x2b/0x80 [ 1325.835294][T23944] ? lockdep_init_map_type+0x5c/0x280 [ 1325.835308][T23944] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 1325.835328][T23944] timer_init_key+0x2f/0x60 [ 1325.835351][T23944] rxrpc_lookup_local+0x710/0x1220 [ 1325.835372][T23944] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1325.835393][T23944] ? __local_bh_enable_ip+0xa4/0x120 [ 1325.835412][T23944] rxrpc_sendmsg+0x37e/0x680 [ 1325.835435][T23944] ____sys_sendmsg+0xa95/0xc70 [ 1325.835458][T23944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1325.835482][T23944] ___sys_sendmsg+0x134/0x1d0 [ 1325.835500][T23944] ? __pfx____sys_sendmsg+0x10/0x10 [ 1325.835526][T23944] __sys_sendmsg+0x16d/0x220 [ 1325.835543][T23944] ? __pfx___sys_sendmsg+0x10/0x10 [ 1325.835564][T23944] do_syscall_64+0xcd/0x4e0 [ 1325.835583][T23944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.835598][T23944] RIP: 0033:0x7f2d1dd8ec29 [ 1325.835611][T23944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1325.835625][T23944] RSP: 002b:00007f2d1eb38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.835640][T23944] RAX: ffffffffffffffda RBX: 00007f2d1dfd6090 RCX: 00007f2d1dd8ec29 [ 1325.835649][T23944] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1325.835658][T23944] RBP: 00007f2d1eb38090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.835667][T23944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.835675][T23944] R13: 00007f2d1dfd6128 R14: 00007f2d1dfd6090 R15: 00007ffe601cf0a8 [ 1325.835688][T23944] [ 1326.231121][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.281207][T23938] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1326.292417][T23938] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1326.302556][T23938] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1326.741392][T23938] syz.5.3781 (23938) used greatest stack depth: 17552 bytes left