last executing test programs: 29m54.813012463s ago: executing program 32 (id=669): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0x0) fcntl$dupfd(r1, 0x406, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000000e0008d71"], 0x50}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000060000"], 0x48) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000002480), 0xce4, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r6, 0x0, 0x100000000000000}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r8 = syz_open_dev$loop(&(0x7f0000000100), 0xf, 0xc28c2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd0000009f19000000000000000000ffff0000000000000000000000004e00", [0x7, 0xffffffff9673e35d]}}) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) 29m36.281845046s ago: executing program 33 (id=679): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0xc, 0x0, &(0x7f00000004c0)) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) syz_usb_disconnect(0xffffffffffffffff) 29m34.696222142s ago: executing program 34 (id=681): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x50d40, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="6976f2b03d2e0d", 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x8000000000000001, 0x9, 0x2, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) 29m33.84253367s ago: executing program 35 (id=680): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x50d40, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="6976f2b03d2e0d", 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$media(0x0, 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x8000000000000001, 0x9, 0x2, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) 24m45.890278587s ago: executing program 36 (id=1193): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xe949, 0x593241) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="c31e640505ce52dc4a2c0c0bbe55953bccad8cdaeca2273e04542a883b3cdfe3f9ae9137bdf46f0697ade31c0e1526a71e089640782cbdea78e1e072350f070170759268404ac1e5d4358ce9ebb57ba9d335e6b2df07dbb1fec230a75144615956799d2c80357a14793aa34a9fd2b5ed4929347885b39ebe0daced9ec26b3477df5e3e8d786d26cdde4771bcc548a7112a49b6bad901026174b6112b5fddecffaf454d24ecd08511ce341300c70c339bed0d5b16d9db6b71f1f167090dbd7ced8fb2e26a2086a169e9dc29e1c391499fc733878985b610e6f0bc1e87b31efb934e3983ad9ea22f4ebd98238b3132617119013f252907", @ANYRES8=r1, @ANYRESOCT=r1], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r6, 0x80084523, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='R', 0x1, 0x7ffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x4) 20m48.543238856s ago: executing program 37 (id=1687): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x40000000, 0xfffffffffffffcdc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x89800) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) listen(r5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x84, 0x30, 0xb, 0x80002000, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e3fbfffff8ffff2c56d8d17f"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r8, 0x8008550e, &(0x7f0000000080)) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12], 0x48) 18m36.479203479s ago: executing program 38 (id=1914): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2000000000000013, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="00000000000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x80000300, 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_elf64(r6, &(0x7f0000000e00)=ANY=[], 0x1820) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca41", 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000fd00"/17, @ANYRES32=0x0, @ANYBLOB], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0xd, @private0, 0x30}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz1\x00', {0x8, 0xe, 0x1, 0x7ff}, 0x3, [0xfffff9a4, 0xe, 0xffffffff, 0x9, 0xb92, 0x7, 0x364, 0x9b, 0x8001, 0x1000, 0x2, 0x2, 0x10001, 0x6, 0x7, 0x4, 0x2, 0x1, 0x4, 0x3, 0x9, 0x4, 0x2, 0x0, 0x4, 0x4, 0x9, 0x5, 0xc720, 0x9, 0x3, 0xdf8, 0x7f, 0x5, 0xcc, 0x1, 0x7, 0xdb, 0x4, 0x7, 0x8, 0x7, 0xffffffe3, 0x80000001, 0x10, 0x7fff, 0xfac, 0x8, 0x8000, 0x6, 0x8, 0x2, 0x3ff, 0x6, 0x101, 0x8, 0xe, 0x4, 0x10001, 0x4, 0x87bfa347, 0x3, 0x6, 0x8], [0x8, 0x6f52, 0xfffffffa, 0x40ba8439, 0x6, 0x5, 0xfff, 0x1000, 0x8000, 0x2c5e, 0x6, 0xd, 0x51, 0x1, 0x5, 0xffff, 0x7, 0x9, 0x3, 0x4a24, 0x81ce, 0x41, 0x6, 0x7ff, 0xdc, 0xffff8000, 0xe76, 0x8, 0xffffff81, 0xe, 0x9, 0x0, 0xfff, 0x1, 0xbe08, 0x10000, 0x3, 0x80000001, 0x4, 0x7fff, 0xfff, 0x0, 0x575, 0x0, 0x1, 0x3, 0xe6, 0x6, 0xfffffe01, 0x0, 0x6, 0x9ea, 0x8, 0x8, 0x2, 0x3, 0x2, 0x4, 0x0, 0x7, 0x0, 0xf5, 0x620, 0x5], [0xce4, 0xfffffffb, 0x3, 0x7f, 0x7, 0xfffffffc, 0xa, 0x1, 0x6, 0x9, 0x5, 0x6, 0xa0, 0x6a9, 0x0, 0x1, 0x5, 0x2, 0x6, 0x4f46, 0xfffffff3, 0xf, 0x367, 0x4, 0x7, 0x81, 0x8, 0x4, 0x401, 0x0, 0x8, 0x6, 0x0, 0x80000000, 0x9, 0x0, 0xcb, 0x2, 0x0, 0x1, 0x100, 0x5, 0x93c3, 0x2, 0x4, 0x10, 0x401, 0xd, 0xffffffff, 0xfffffff7, 0x71, 0x2, 0x480, 0x6, 0x20000008, 0x6, 0x3, 0x2, 0x0, 0x4, 0x4, 0xffffc3b7, 0x2, 0x1fe], [0x7, 0x2, 0x7ff, 0x1, 0x5, 0x1, 0x8, 0x0, 0x200, 0x0, 0xc1d, 0xd, 0x7, 0x2, 0x1, 0xf1, 0x9, 0x5, 0xe56d, 0xd, 0xc6c0, 0x30000000, 0x5, 0x7, 0x6, 0x3, 0x7ec6, 0x6, 0x5, 0xd, 0x40, 0x1ff, 0x3, 0x2, 0xf7d6, 0xfd, 0x8, 0xffffffff, 0x8c3, 0xfffffffb, 0xfffffffd, 0x7, 0x7, 0x1, 0xeb0, 0x9, 0x1000, 0x2, 0x5, 0x8, 0x8, 0x874, 0x2, 0x3, 0xffffff7f, 0x401, 0x1c8, 0x176873ac, 0xffff5155, 0x2, 0xed20, 0x4, 0xfffffffd, 0x1]}, 0x45c) 16m23.088520512s ago: executing program 39 (id=2128): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x70bd27, 0x20, {0x2, 0x18, 0x20, 0x0, 0xff, 0x3, 0xfd, 0x0, 0x100}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004080}, 0x800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1cb842, 0x104) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r6, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x10000000, 0x0, 0x0, 0x1, 0x0, r5, 0x0, 0x500, 0x600}]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da705, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xf8, 0xff, 0x0, 0x0, 0x1, 0x1000a}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfffffffb}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4004094) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x60, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x60}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) statfs(&(0x7f00000000c0)='./file2\x00', &(0x7f00000003c0)=""/165) 14m16.47728353s ago: executing program 40 (id=3114): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20000084) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pread64(r0, &(0x7f0000000000)=""/23, 0x17, 0x7) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13m56.846184619s ago: executing program 41 (id=3260): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xc5, 0x6, 0xca1, 0x0, 0x10003, 0x100003d, 0x400200cc4, 0xffffffffffffffd3, 0x80000001, 0x9, 0x8001, 0x4, 0x2, 0x4, 0x2, 0x80008d], 0x60000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m43.861313932s ago: executing program 42 (id=3655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x4, 0xfc0, 0x4, 0x3, 0x9, 0x5, 0x6b, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x3, r6, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0xd0) 11m4.093204194s ago: executing program 7 (id=3917): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000001c0), 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046}) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000340)) read$msr(r3, &(0x7f00000066c0)=""/102400, 0x19000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x2, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={r1, &(0x7f0000000100)='/dev/dri/card#\x00', 0x244402, &(0x7f0000000140)={@_ha_fsid={[0x5, 0x2]}, {0x5, 0x3, 0x8000, 0x101}}, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(0x0, 0x1, 0xc00) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) 10m58.482531273s ago: executing program 7 (id=3925): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3c200}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 10m49.747331008s ago: executing program 7 (id=3933): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_xfrm(r0, 0x0, 0xe61c1323c3c20c32) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r5, 0x5404, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x20000000000003b0, 0x0, 0xd) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) mount$9p_fd(0x0, 0x0, &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) 10m47.391261718s ago: executing program 7 (id=3937): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a0002000535", 0x1e}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x10, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rseq(0x0, 0x0, 0x0, 0x0) 10m44.988474373s ago: executing program 7 (id=3938): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000400)={0x0, 0x2000}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10m37.712525459s ago: executing program 7 (id=3945): r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r6, 0x0, 0x18, 0x0, &(0x7f0000000680)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 10m22.014019586s ago: executing program 43 (id=3945): r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_int(r6, 0x0, 0x18, 0x0, &(0x7f0000000680)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 10m6.544746165s ago: executing program 0 (id=3972): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x9, 0x5, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x64, 0x0, 0x7, 0x29, 0x0, @empty, @local}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) listen(0xffffffffffffffff, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000001400)={'multiq3\x00', [0x100, 0xf, 0x2, 0x2, 0x1, 0xff, 0xe, 0x20000000, 0x6, 0xfffffffb, 0x0, 0x7, 0x5, 0x0, 0x10001, 0x7, 0x0, 0x8, 0xeec, 0x401, 0x7, 0x4, 0x8000, 0x9, 0x3, 0x3, 0x3, 0x0, 0x7, 0x7, 0x8]}) poll(&(0x7f0000000240)=[{r4, 0x310}], 0x1, 0x6) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000000c0)={0x6}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) getrlimit(0x6, &(0x7f0000000100)) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 10m3.043492442s ago: executing program 0 (id=3976): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x2742, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x10004004, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, 0x0, 0x1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2000, 0x0) preadv2(r3, 0x0, 0x0, 0x6, 0xc5, 0x1) chdir(0x0) creat(0x0, 0x0) fsopen(0x0, 0x1) ioctl$COMEDI_CANCEL(r3, 0x6407) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000005) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000100)={0x200001, 0x81, 0x180000}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) 9m59.805232567s ago: executing program 0 (id=3978): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b000000000000000000000004000300"/43], 0xd8}}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8910, &(0x7f0000000580)={'bond0\x00', 0x10001}) 9m57.375910661s ago: executing program 0 (id=3982): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120183008000", 0x0, 0x0, 0x4, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) syz_usbip_server_init(0x4) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x1b, 0x16, &(0x7f00000023c0)=ANY=[@ANYBLOB="2d0a4c52340461fbe99029d0c1c4b765265aa274d71ae052d8179e80e562c1a551c3be5ad905599299ff7906d9cfd51663c6d2792d3d46e80b04f708c3ee063ef51f8be93468c52b8f99dc1044fb6821d0e690c2b110d8a82d53f78a9067671ec2133d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) lsetxattr$security_capability(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)=@v1={0x1000000, [{0xc88, 0x2}]}, 0xc, 0x1) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsetxattr$security_capability(&(0x7f0000002440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002580), &(0x7f0000002680)=@v3={0x3000000, [{0x87, 0x7}, {0x6, 0x8000}]}, 0x18, 0x2) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) 9m55.360890828s ago: executing program 0 (id=3986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = io_uring_setup(0x15c0, &(0x7f00000000c0)={0x0, 0x5e7, 0x10000, 0x2, 0x158}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000040)={0x100, r2, 0x20, {0xc5, 0x100}, 0x4}, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prlimit64(r1, 0xb, 0x0, &(0x7f0000000280)) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000006506030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 9m55.188733854s ago: executing program 9 (id=3987): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xb00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x200042, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0xa0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0d4}, 0x8800) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 9m52.116925987s ago: executing program 9 (id=3988): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) close_range(r0, r0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x0, 0x1ee}}, 0x18, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) 9m41.248463045s ago: executing program 0 (id=3994): memfd_create(&(0x7f0000001780)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xc7\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xbd`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x9d\x83\xcd\b\xd1\x02R\x9b7\xaf\xb7o\x01\xf9\x15\xb8KB\x04\x06\xa5\xea\x0ft\xbb\x1er\x14\xdb\xd1\xcd\xfd\x00'/146, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00', 0x4}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x1000) move_mount(r5, 0x0, r5, 0x0, 0x156) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x300000d, 0x44) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x70, 0x0, 0x3}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) 9m37.625903482s ago: executing program 9 (id=3996): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r4, 0x800000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x368}, &(0x7f0000000340), 0x0, &(0x7f0000000000)) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x8) creat(&(0x7f0000000100)='./file0\x00', 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000), 0x4) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, 0x0) unshare(0x6a040000) 9m30.454049929s ago: executing program 9 (id=4001): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r1, 0xba87317d461c07c9, 0x70bd26, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x40000c9}, 0x1000) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0003045ecc75e203011c"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="01ff0f0000000000"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = syz_io_uring_setup(0x49c4, &(0x7f0000000580)={0x0, 0xbbda, 0x13d81, 0x3, 0x29c}, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) syz_usb_disconnect(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_ep_write(r2, 0x9, 0x6f, &(0x7f0000000540)="428c1f94acf842f8f62b9ea6de793ed07bab11dfcdf955dc87295cdf1bd5702e02a95e19ab1d07a57d995ccd6f3e7ba4f621c93bb1e7f2e7e36f7c6a15cc59880653482d13362675b8f086a1bd6d8189a93c34681085b0f9931a892b34cdb759c95caae83fbcb9773fe817ba382e82") close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000) r7 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f00000000c0)={0x1, {0x9, 0x8bb, 0xc4f, 0x870}}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile64(r8, r8, 0x0, 0xc7fb) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x58, 0x2, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffffa}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) mount$fuseblk(&(0x7f0000000280), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x100c, &(0x7f0000000640)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}], [{@appraise_type}]}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 9m29.287611512s ago: executing program 9 (id=4002): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2000000) prctl$PR_MCE_KILL_GET(0x22) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) write$nci(r2, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f0000019080)={0x2, 0x200, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x1000, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x4008040) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) 9m25.165748691s ago: executing program 44 (id=3994): memfd_create(&(0x7f0000001780)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xc7\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xbd`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x9d\x83\xcd\b\xd1\x02R\x9b7\xaf\xb7o\x01\xf9\x15\xb8KB\x04\x06\xa5\xea\x0ft\xbb\x1er\x14\xdb\xd1\xcd\xfd\x00'/146, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00', 0x4}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x1000) move_mount(r5, 0x0, r5, 0x0, 0x156) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x300000d, 0x44) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x70, 0x0, 0x3}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) 9m23.469629187s ago: executing program 9 (id=4007): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_dev$video(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) keyctl$clear(0x7, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r5, r5, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040021}, 0x30) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9m8.326374704s ago: executing program 45 (id=4007): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_open_dev$video(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) keyctl$clear(0x7, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r5, r5, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040021}, 0x30) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8m3.982340171s ago: executing program 5 (id=4078): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000000001c, 0x40040001, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x40010, 0xffffffffffffffff, 0xe0f22000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) r2 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x20000, 0x4}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xb, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) renameat2(r2, &(0x7f0000000240)='./file0\x00', r4, &(0x7f0000001500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) listen(r1, 0x2b4b) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r5, &(0x7f00000001c0)=""/57, 0x39, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0x400, 0x20bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0xfff3}, {0x0, 0x4}, {0xf, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$BSG_GET_TIMEOUT(r4, 0x2202, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000dec94fb02000d5ca714d"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r3, @ANYBLOB="01002dbd7000ffdbdf252e000000080003", @ANYRES32=r6, @ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x20000000) 8m3.837126186s ago: executing program 5 (id=4079): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r5) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 8m1.379379038s ago: executing program 5 (id=4085): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000400)="5003", 0x2}], 0x1) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="10", @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250100000000000000014100020018001700000000000000006574683a7465616d30000000347f90e8f14ae6a230ef996b8a990499adef732af783c6b87d7b9d6e7287bd22acdfb4e524de64cb8d7756101f2a3f9835329fd0e88ccff373239b66a8e62df1788d2012c3bc46854668471e1bfeb853627d61216ce6552f413499506ed6bf59da318b6f4a0c288b3778a0a34b8a6a0013a066a156073db8585f6772b4803dbe927413427a6dd91adc38043b29cfe9a5d0cdf6fc7e3bad221e09401608edda2641915977"], 0x34}}, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)="92e189088debce1f6bc1093d80ea466f56f701f4acf15716acf40082be79afd46fb564ee9cfd9c81d2498403d22e0907d8e9ffda0465f00d04bc2d612d4c9c95b0570a5405bfefecdb110840c7575ad0cdda1675f75468f10aa57a8dbbe926dbf9e9113252650dfa08a30a7b0259abf98f16d57f048550d80526741b74b2b5fc851d3bcca5028f5c1a9aa56a8d9246a14a119c108eed72451d006d05c0422167f0f93ec1ab94397d444d1a805a31362fcdb3d3f2b1da", 0xb6) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r10, 0xae03, 0x42) sendfile(r8, r8, 0x0, 0x101) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) 7m58.580718118s ago: executing program 5 (id=4088): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x40, 0x2001, {0x0, 0x0, 0x0, r6, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000340)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x6, 0xa2, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback}, {{0x4e22, 0x4e23, r7, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0xd, 0x0, 0x7}, {"f5a95249f8abd89f1b14eb523862ef0dd15023583ccddd13969fcead6ad23b7e8884712bebc3db7d9995683d2eb504681ed0e319d3263ebefc26a844b0fd0963706bb33610c0714bf600aba73229ae9d539e6d966ddfb8965a1ed4be382319186e5035f829435590aa739eb158596b9422dc412722af1e8e58a9"}}}}}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000100), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/179, 0xb3}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/107, 0x6b}], 0x5, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/97, 0x61}, {&(0x7f0000000b40)=""/144, 0x90}, {&(0x7f0000000c00)=""/47, 0x2f}], 0x3, &(0x7f0000000c80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xd8}}], 0x2, 0x2000, &(0x7f0000000dc0)={0x0, 0x989680}) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3f) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000180)={0x1}) r11 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r11, 0x0, 0x0, 0xc000, &(0x7f0000001540)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 7m57.498732046s ago: executing program 5 (id=4090): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_channels={0x3d, 0x7fff, 0x31, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}}) 7m57.480681487s ago: executing program 5 (id=4091): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x2, 0x6) splice(r3, 0x0, r5, 0x0, 0x80000000, 0x3) pidfd_getfd(r5, r0, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000440)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r6 = syz_open_dev$vim2m(0x0, 0xfffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000005b000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x5}, 0x4a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x9, 0x9, &(0x7f0000000f80)=[{&(0x7f0000001040)="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", 0x12b, 0x8, 0xae1}, {&(0x7f0000000300)="9f406c14", 0x4, 0x1, 0xfffffffe}, {&(0x7f00000003c0)="af4c5cfd7471cbe2fd0d078e1a187322c4fb33625fa89ff44ace49677cdc5512886134fc2f8cb1a7ce0d5e8907a923df6d83bbd1291e2e", 0x37, 0xfffffffd, 0x7}, {&(0x7f0000000c80)="ac958155b4ba0f60eba57d2508bbb1aa2592e80191d627a95e45690187d5400f2f647a1637ede15317fdad33b1ea757c7b4dc2ca0268a911a1615a7349cc063a028f55eb36de14db23dd2f41f438515695613b5660d45e7d6694d1351fb8cfeb2957b90d27ae7da4ca3a0d067537b3d62b572a1eded6e620a2dc3fc1e74c4bfb40b4ade6750a89c4a869dbe1956a479998a0939da4217ce23f78c52e84668d920d283bb7a6b5dd6d3df5e0ed0ea426a5ce7a8a2a24efb72269e0d34c6ef4192c2df45b7afee108e990c8bb0f64f6ddc7cb77", 0xd2, 0x38, 0x48c}, {&(0x7f0000000d80)="d09899a4379d4722f771cc78202d4f79cd5bdc612236801f33acd70dacb79aa11a82795730c184a7b403ddd7f2fcc743999a00138b48d497471a14c6d9f410c243", 0x41, 0x1, 0x2}, {&(0x7f0000000e00)="0d3c6e3448f5584306e975b17aa37198bcf9f3d79c88633a97c905f956e4d62dadbe9408e5669a00fa18cb4065c8fa29f3", 0x31, 0x4, 0xfff}, {&(0x7f0000000e80)="08a3c9908e69778fbc65dd530d5ca2c91ef55ad8cf3aa6522855a6f8a7cad667b3da66db32c139556ed67ad288d86f1cb603817b081603e16eae05c593ad2b23a87f52d3e7845ee2cb60e254e024612ea70637b586ca6976de65eea81dae35fc100ce53586b45012c9", 0x69, 0x2, 0x1}, {&(0x7f0000000f00)="b40f13e56476653750", 0x9, 0x4, 0x2}, {&(0x7f0000000f40)="8f4ae2d4b050739c2d9d280df13f4ef57fa048666837becc391ee4c80e98527787c4c9f747649bcda63bdf4823d284310ab9ee51d865e5fc61", 0x39, 0x7, 0x2}], 0x280000) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540dca6370b4e8b0d55760abdb0f4f570a3091bd052af55da6c82c55b5d3785638065031376d403776d7a95ea936264d87527c74117a201312226136a7eb1adfd049a30ae8156e4980690677b8ce16410370fc40763e338b1c9eaa9997ec9d1c59240123d5b80871ce361a32f6f6351b4d9e508fbe29264867bd11e9ebd3c0b7b5fe7477ecde301380049a14ed2fb"], 0x5c}, 0x1, 0x0, 0x0, 0x10000046}, 0x90) 7m39.406411605s ago: executing program 46 (id=4091): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x2, 0x6) splice(r3, 0x0, r5, 0x0, 0x80000000, 0x3) pidfd_getfd(r5, r0, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000440)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r6 = syz_open_dev$vim2m(0x0, 0xfffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x5}, 0x4a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x9, 0x9, &(0x7f0000000f80)=[{&(0x7f0000001040)="31bd3291caf92ed5bdedbba9ed5315f0a3cdc1ae6cd0eda5a2f13275d7bf87e7f0da81a24643c01f71b6816ff289ed03c8a2d68dc8f827c70699645f09bc4ad379dcf6441e7348d092cf366185a90a954d61aa41dece1a4208b2507d7da0d09410059fbec16a6c064b939421d53dc0b2933ed061c163cc7cc4b50a2411770ce54078cb995484d816c40ee5391517625eea3055e3c332a9b3ef7b50589f3bd225af1c703ff7b110ca86c92a04610a02e9fcae3da29b66a7c55be0ff71eac19580ac59da1cce82da1f444afa938fc4cd202940e11e588af66632263ac56ba41f2519a337006808e03597f1b5013828de9f751dbdb78e281b41eb20d8d3a0504a26635a4f9c728a7b64014b7566a5b9464724a0a0d9b244f058ed0943687d5b5cfa1c9318b6ae0084256bb593", 0x12b, 0x8, 0xae1}, {&(0x7f0000000300)="9f406c14", 0x4, 0x1, 0xfffffffe}, {&(0x7f00000003c0)="af4c5cfd7471cbe2fd0d078e1a187322c4fb33625fa89ff44ace49677cdc5512886134fc2f8cb1a7ce0d5e8907a923df6d83bbd1291e2e", 0x37, 0xfffffffd, 0x7}, {&(0x7f0000000c80)="ac958155b4ba0f60eba57d2508bbb1aa2592e80191d627a95e45690187d5400f2f647a1637ede15317fdad33b1ea757c7b4dc2ca0268a911a1615a7349cc063a028f55eb36de14db23dd2f41f438515695613b5660d45e7d6694d1351fb8cfeb2957b90d27ae7da4ca3a0d067537b3d62b572a1eded6e620a2dc3fc1e74c4bfb40b4ade6750a89c4a869dbe1956a479998a0939da4217ce23f78c52e84668d920d283bb7a6b5dd6d3df5e0ed0ea426a5ce7a8a2a24efb72269e0d34c6ef4192c2df45b7afee108e990c8bb0f64f6ddc7cb77", 0xd2, 0x38, 0x48c}, {&(0x7f0000000d80)="d09899a4379d4722f771cc78202d4f79cd5bdc612236801f33acd70dacb79aa11a82795730c184a7b403ddd7f2fcc743999a00138b48d497471a14c6d9f410c243", 0x41, 0x1, 0x2}, {&(0x7f0000000e00)="0d3c6e3448f5584306e975b17aa37198bcf9f3d79c88633a97c905f956e4d62dadbe9408e5669a00fa18cb4065c8fa29f3", 0x31, 0x4, 0xfff}, {&(0x7f0000000e80)="08a3c9908e69778fbc65dd530d5ca2c91ef55ad8cf3aa6522855a6f8a7cad667b3da66db32c139556ed67ad288d86f1cb603817b081603e16eae05c593ad2b23a87f52d3e7845ee2cb60e254e024612ea70637b586ca6976de65eea81dae35fc100ce53586b45012c9", 0x69, 0x2, 0x1}, {&(0x7f0000000f00)="b40f13e56476653750", 0x9, 0x4, 0x2}, {&(0x7f0000000f40)="8f4ae2d4b050739c2d9d280df13f4ef57fa048666837becc391ee4c80e98527787c4c9f747649bcda63bdf4823d284310ab9ee51d865e5fc61", 0x39, 0x7, 0x2}], 0x280000) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540dca6370b4e8b0d55760abdb0f4f570a3091bd052af55da6c82c55b5d3785638065031376d403776d7a95ea936264d87527c74117a201312226136a7eb1adfd049a30ae8156e4980690677b8ce16410370fc40763e338b1c9eaa9997ec9d1c59240123d5b80871ce361a32f6f6351b4d9e508fbe29264867bd11e9ebd3c0b7b5fe7477ecde301380049a14ed2fb"], 0x5c}, 0x1, 0x0, 0x0, 0x10000046}, 0x90) 5m55.329759822s ago: executing program 4 (id=4559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m54.776680269s ago: executing program 4 (id=4563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000134000080040000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000040)=0x80000000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x4c) 5m50.885817707s ago: executing program 4 (id=4575): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x2, 0xfe, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x32}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m50.336733701s ago: executing program 4 (id=4578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/84, 0x54}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x84, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@erp={0x2a, 0x1, {0x1}}, @rann={0x7e, 0x15, {{0x0, 0xb}, 0x91, 0xd3, @broadcast, 0x8, 0x1, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x84}}, 0x0) semget(0x0, 0x1, 0x206) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x20, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000001c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000900)={0x12f8, r9, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x29}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2d8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x45}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe19a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x1124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0xcc, 0x3, "cd649adebf6f0d02d7139388a9ad4b64b5bfd5c322fca3e5025970a6984a48d7ec947dd58cedbc2533b7b4ffa65ae0fbbe8201954145975c73d450119fa862663b5a71c1a99cc7215729d1e575c8c2941d112fb1126c0f2a61fdbe39240342d287f5732301101fb0f07d0e56080de63c13a34db7bdf441a02a5098ccb5cd938f0d8e958f7041fcadf853ba30de55631490743211384cd6e02828d2f8c1a03065f2327997039dc52ae952e226fb6a06c0b567af92427baee398debb682d9fad7ae326d79426b2fe6e"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "8b68db92c3cf79b3010adf3746d21b09d00fad1529de35cfd91aef7d"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x12f8}}, 0x4140) 5m50.124418145s ago: executing program 4 (id=4583): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x50000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 5m50.097854759s ago: executing program 4 (id=4585): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x1], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r6) 5m34.982833261s ago: executing program 47 (id=4585): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x1], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r6) 4m47.63960604s ago: executing program 3 (id=4799): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 4m47.267436614s ago: executing program 3 (id=4801): r0 = openat$fb0(0xffffff9c, &(0x7f0000000380), 0x280a00, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1, 0x3, 0x6, 0x5, r1}) socket$inet(0xa, 0x6, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000002500090122bd7006f9ffffff0200000008003d80ffffffff0800030047000000080040"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x8000000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e747b726c656176655ff4a36ddb963d"]) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1600000000000000040000000200000080010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000799fb861147952a1e203527e09bb8c4668d4105693e13cb430c9d74be698243d52862406ecc1f990ced436cebd6254dc4760393ab9a386c156486595"], 0x50) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x5, 0x7ffc0001}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, 0x0, 0x20000884) write$UHID_INPUT(r3, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000680)=""/87) 4m45.23522046s ago: executing program 3 (id=4804): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x3}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x4004880) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 4m44.547774838s ago: executing program 3 (id=4807): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 4m41.167121437s ago: executing program 3 (id=4811): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x170, 0x30, 0xffff, 0x0, 0x0, {}, [{0x15c, 0x1, [@m_ife={0x104, 0x14, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x7, 0xe12d}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0xa1, 0x6, "197015f418d029cd5d264708aeb47dc1c6ac9edaae17f8a2053faefdd1dbd491bf037a5db4d6f9a6169127b3521d8bdcfd63aec52a5e96b75b62c15b3752d6fb66bebc068e19514a880b9cb7a1237f551dada81fb3cda309ad1bf0c0706b2e9714cf2429983d44b7b0f667bbb9341f6e270363ff72fcc620650e22ee28bba5a9bfcfa7c92b5af7db2dc5a3e30ceab16fa52c850fc8b5d9c8b11ba7f216"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x170}}, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) 4m39.536204056s ago: executing program 3 (id=4815): ptrace(0x10, 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80080, 0xa1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) read$dsp(r2, &(0x7f0000000280)=""/79, 0x4f) 4m24.013095953s ago: executing program 48 (id=4815): ptrace(0x10, 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80080, 0xa1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) read$dsp(r2, &(0x7f0000000280)=""/79, 0x4f) 18.621738544s ago: executing program 8 (id=5632): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x2, 0xffff, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"45707fe6c13ec0bd03e5ecc69c764fabe1f326e479445fcb5b205f8c3b622124e794bd8e155f4d904619803fd30c7c202046abd5cd2a26aeb32d246533b18dbb112bba54737fa3db4899cfbf40d3f0c487e58766cf9c7b78842142fb94c1a1c94a4b98b0cf1fed922cdbea0b164200d9f958ecd17c75d4b852a384e41367b0298b005bb13c7050e0342de230db20f9a86fe5fff6fff420f03ec7bb88747480857ed08bd7b1c7d178945f1af284d8ca636101edf9c287491e9a33df027ba595b273a8ed5aa6e64d7d3b218b76dc3566398b63e3a8dd3de57079ca6118e08a919f343ead86112d5dea53d5318814f9ddf14081758874653d15a71d0a4b7b18910a03e474208e31ca08e010c28aaa46ecc7c466cb8a06ee6047ca4ae798dc67f6e612afb9aca11097fec86fd5f12ffc6d43e70d749ed8962f2c9d7e88c49cad8b6af5ffca7d38eecafe276f318fdc229937052dee824a11519c054b9716a45703baef71e935632522ac184812313296a6599384899e8015ca5812cd608882ed02e8bc602bb3fb28b7e2bf2128e9fbe97a1e27e074586c6ebb0449ae67c56a96a0b0fcddadb770e57ef7377fed2191d519f222f8a8ce060cbeaa0428c835884f62fca487cd834ad600a5f68c28840878f9f519238abac8ab71c985bd0cdfb5bb1448cb8bb34a59ae512f2deee1f404e0d0c603c615a09be57ef4b94005ee0ef906239d56fa9f310b1be21098ac02db6302c4950496fdbc249d8ffd7cd19e7e26464e712c3184182b57546ae65b77ce55edeae4ee690a0db16b5c26977d36a3369c58ee48588f0ba502f4b584ccfe2e0f60b861930f24db34307ccfb6bf8139b0f8dea88413afc00bcf5582f211348df402e4ae1556627ac3f07dcc77d44d9454ba8eed51139ffdcea61172920c3494ff0d222e6836f8de22d66b10e3875b9b89a48c4ae134e7d81049039d186ea8995b5a289584437c54eb5d03197a7b81e2339f633dbba878eef49eeb85ee34df7789295c5491584af81f8f53487b713becb9a285f674d4c72b188ba6f767ede8ffae64842ecb82b33e799e90f7e977556884664e978e9dc7686c5d1253d4328ac7d95c67258a4fbc267a29b515f09a27a87015756c825f3ce309a2d8b089f2aed4e560d2b154d40ec1fe9cd01ecbfe3b025ff4222891757b376a9cbf325820912f8027ddd963d1ccf549baa912c0cf4817bf1a639dd5b39e56a63d108d914169c72577bc45730e1a9e20529a9f6a8aee9c83da159467c2f77212c1b9eda16804490198a29c61efec362dfa448ffa56a8e120690222f8e56ee6a820feda4173637e34c1aab938637ff82aad4f4f352f12ff9c164a9a7ebaa7a17797764b2bacae18898c33e8c759298eb94db0b8e676b6cc7971e6bd80445472af014f7470656d2566d7ca656acd4135e61dd4545f2d587ea05e6161db82f298bd71d610e50a092b817789473f5da3d32716613a1b09bbda29d501eff30e9993271f20423e74a2a0a1662f99f73c27e855d32796bc68a769e92e2b5d659f2ebd132dc9bfffbf031cd225f7e83e321160b65e55ff38462e8a36a4c533d30302d8102bcb41bec2abab1984b06733d370c2f3363a8d5e30c08f0e74e9e876f72745f574bc80fbe25943896ebe04fe72cfa9de6ee8506ad70c3be65a86eaf4f1fb913821afc85cf985b841d8ca96321dc1a31724f0b599c2ad147713692ecde7238ac87f2f426169bc060281c460f0e1346a92f464ee1f794002d3187a84fc6757f735cbbf42c41a0bb5d99ca04ef3792276491a1232fbcc00f7caf321ac9951a6517eeabaedc207c6b4d9c8f4e5a458d7def6c08a508b66ed3ccae5b544f0b84c9871129c4f6efa804404852993483d06b9227a689cb37a605b43265ca46ebe674073fbca8f83a56856cd6d5cf6e018dea75ca325b2365527888321bc8686069a7dbdc8b22a32c20e07e79eca4f83902a7d02c641bbdbe66a1bc18ff132c770b67964cce6c3800c05a5f0e0253ebd85b825e1c692887e36e4b938ac97507979aa39459ea04070fb078c63c334eabbc1e6444ce1336f98a41045d2a576a049d07368e027b182f6038ad38c3359dd3de78544dc621f9acd4f0540e117162c22e753462c4be2065724c3429b75b4db74e89d84f2795aba986dfc2b1fdcbe98346260cb9748f454a65f4b35b874ac5910184ad0fece39f01cd50663ca2462729f4cfa4e756c0cb6fc397f77c8fdcd7c9e194705e522ca83c625c7fab6ea43aad89db0b6ba71eed901209fc7330e8bc671aff44e5e48502abddc2409b52ece3779d3b19c1832b30abd3f81a9ff0c68fce42ad9c1941f03ce33ed9d37dce98dbe5e1d23519d22087f307e870c82f028e96fef580c4c8c62a32c2776eed31c3d8bddeb43cc53ab8592478253b6de3095d6828bd960989b9ed9879f863d3128f708eebe99f7701823f232444f2ac9830da973b993679e1bb510b2b6939847751cd0d4642d7bb899e21a7c26938fae9f1b149ff19032b5149b4cde635fa99c2160a8cd6f7ad6a5a242b6b31e253e04ea72f1b6f60677ef87fd8e175373c24822a3794134a3124f2e109a59d9db08e48f845254d4b68c42da5b2b2f3c3c528f4281cae4f5117cd0a4658e9ed1dba09656393623fb13fad1cda4eaa602176aba55ba251817017338193512318390fed2a914739050b1a85ca3833f71aa7c4c8fb45158b530c24bd4316f72c9b432a1bd067cd6fc64d646cc06bfbbf990dacb32de9496a8d730cc07171ce548957d435b2f121ea4bb939f70785ebce86f0ad6d89bb71cdc1d0897284ac5d09b95a76ddbfc787a98193b9cbdb1d3ffd89d5f10b9bbb5d41a2a33f73385df351db85c83786db3da558d890f414b21615160dfcb3b46f0958d492bd6d056550c48e5f0c26dd10c1c6ab3b4c6b7d911db5ac463f8e37a8bbcc2295fe79fa109f491a126fff6a1ffe161c7787f746fc8ddea5f19bd20fabca63aa81ae2d725e0b250f27fd7c8431ef6b2827904f62b5ffefc9bfdfb7d55ef6d9883c6ab43c5214b4af237d0df67afcb3d62e80041720952e837e65a22351cb3bf8a9e271568597f79f12144495d31ef72fc36a86e9eb4359790aee88c00b05473ac1a90b8bbe0c0db99570dd9bda506469c258e145841d9c26c9f32722a678cf25657acd124831cfc6a1809e341989b46b6df9db72b18f8be39cd845669bad697bc6bd9bec531047d5fa9e201e1a525c372367f8495280c5d93a62f9fb6f890c59959dcbac7de68e3a417befcd11c722067aac4726e2fdcabce2321ea64d9fbda04ab25dedbcb441faaef2d7bf024fe765591fd0354b2bcaa243a6d741272d4458e433118568944047eeec85d3b0f5b98cbdad0f77371be15af9c1bf928eceb652c581fa638e2131c22d901e6f047a5649ffab5324054389ebeb47ff283e0f0ffe074382e520c632bc440cbeaa68770877516e101709489bcb643b187cb2715e58479074cd32d53077331453fc537d34f87a7ec5e5da686c2f304116394e2bd1e480f5da74a6b725d526b71dc869df8dda3feb44f5463f4c678b6a8be34994ecb0902b3cf269de1adf0da8b8ad340b63a6d0237df7e812b94572adbc196784dfcf33e3e97a17b71a2dad7015fb2d59d4c5838ca551984c7d8ee7bf05ab3edf89029ffd20e373fcb72523bff1e63df721416a068d7b2daa3e17fbba8e831c53e29a94dc483e289cf7406a7b2da28ecc761cf9d847d39b7daa5e34a2a0e4dd19ca5c4a1ab274c7fb9a3057109ec0644579f1af210f8b8133dd87f1abd7c71ac09cfc38699573b35e6d9c5bdaa21f16442b87860e9a7f62ff7c2458160c6a64dc218a258ee06e222e47b3b8e0cf5a5c2d9985f886f32abd129ee056fae9b2e32d0571532eab27fa8f079f9c3e378125f2020064850cfb19c53aa44ad8da6f83a5d827bcb131da9d4dde6e8bd0005ef240c4a02b17051845c35725bd8668c3b27b46355febbf2bf3e5dc5ec650499669cbfe921815396d87b3ede410d492cc73ec7f3a40409eed9358131f1f75e31f24e34af6fc7b6fe2730fd043fd69269d939772e7fef5f2e08b657038a61bc8a8d5688b16029d15aacefe6631a364769d3b9b261bbac584c5ba29b7fbda146fc2ac0f1044f89141a57292b87c7275c6ec6011e5b4b40d1ebc4fc32e7c7ac96aea170225e60c189ed09f8df0a143232bd93c6a9d0fba9783f303b3375b10dde9cd501e68df3734f6278a0389418578834e1912806f07e2fa715bfed4bc707559ee3d4966f51cb652b06b747ae2d79b56759035f01953e76a2dc14c817eb0f97332e68c1d3995dcd84b2329194299944cb2c050991c409fe447ed764a9a3a1182bc30f773b0b415c1898460150c9fec8987c24ba07f87f299d014bd89049b3e9d0c9bf1c6bf159545e52cdfcf9e799b593cb411a3db12396dc9c09ddeddfcb6165a99074e531b7ceddaf344baf2e65225203da537cf09fc073d61d92c13a1c95f93e70050b99850272d0227a89faadfbfae923501b0321984b59229b7dc3c646bf4e381534fcb31783c568deb1a36f95c873df99ccab25446c77d96de6b2c70d5baa5b27786e8027b2f70be117bfdc1b2c6d72a6ab2f9e9a9ce231443d0621448e78393142f90177e7bb52976c668583c64beca45af5ea23a060ec910c6cd89ba7cb9cbbd7627ee56dd2d4d60d994cd63e81f181642b8864afa797aecc22358eea8d059d681a333caa15a8c56918523d465e94668d6ef5f3dcc089bffb13ad76dbf79c44c14f494fda3a55f61c3ed659e20a274297360576fd3230b3e4b7e79ea5b7d78c1def22741a38d17b39c646579d8d5df4cae4eca98d1c0df9371532fe89efc2c375fe433699ee14fcd4cf84495d380663aa10a374dba851536b8159deee491ed2c0e2b920bf7c5627db54562f1ff9c56795245be220391d6b681360fa221efc91faf57d80f15b5e3d881cfa30e1145dbde325c6cc8254938a9eb906d846ec5f76f63443b8f2c50db90b6563900a8f97947c82caec3ce4ee3a5e19fc3324376e4b041b7ed82d9940f7a63f9f962f6d746cb781dbbe16a90649881a77e8ac40677e74d87beadc50df2bc624aa6a707cb50c8ee749db526903f38d706df0201bf503b759d320fa940838ec74c914d0de569ed9ffc6eb2cee026ce22cd50a884bccfadbf503892930c4c4dd7efcb3caaac1695027ed66f3f29c7a1edade721bac0599ff0c400542d31d5dc235ddca7bada9cabcf427e038e5c6a54687b955131c547155036401c7a9a44b3b0437edaa30635b84e37996bcc8594307a6b6bbd8b06daa994cf238925485cd9ace35b3fdfd72788199b6f0570eed2078a4b2f36f511a68566927389ca5ce1c854cb500c2693d7a7917cc8f1215608b7dd2ab22de43a5cc91309a4db2a4c29fdeceaec4a604d13af72a60ea50070626aa6d4cfa418b95edda37a88db5218a1e096436a3551ee712ae137217cd0e941c31e86839e3a9aef8058f5f3196a5006f5a13f3343c0cbf50f9a27c7481e62614a4c51071df6c9a2e0058e534be00c510052e03148c79cc31256359b330c0de91e6130ce741d0472a838463987b9cb80693701825d0af139207f4ff1dc5cb92187170acb8c217f26b1a0544021a8ddce3e31de19b603a5eeca75a7a6234f75d890322a2dca481bc814ba65893cf8e4492094dfe534936a4378e85f680559f4ebce2cccdbea2c0c1e776c4cf50df6b0bc2effcee0f2c76b5c478f9dd02e0eef9399ddf2ba449e03cfd5d33388b0b683c3ce0d301ca1ba4ab", 0x1000}}, 0x1006) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004090}, 0x4040040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x8094) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x40000000015, 0x5, 0x0) 17.928155565s ago: executing program 2 (id=5633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x3, 0x61, 0x11, 0x44, 0xffffffff}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x4a8e) r2 = socket(0x10, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) syz_io_uring_setup(0x31c0, &(0x7f0000000180)={0x0, 0xc7ca, 0x40, 0x2, 0x1bc}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000200)={{0x8, 0x1, &(0x7f0000000080)=[{0x2, 0x0, 0x7fffffff}]}, 0xc, 0x40, 0x4, 0x3, 0x0, 0x2, 0x5, 0x49, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r4, 0xc010644a, &(0x7f0000000280)={r5}) read$FUSE(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$uinput(0xffffff9c, &(0x7f00000002c0), 0x802, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0x2, 0x4) write$FUSE_INTERRUPT(r1, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x10) write(r2, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 16.616715836s ago: executing program 2 (id=5636): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee", 0x15}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408000180fffffffd0800f1d7fffffffd0800034000000003090002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) poll(&(0x7f0000000140)=[{r4, 0x44}], 0x1, 0xe6) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 16.377860255s ago: executing program 6 (id=5637): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f02b, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff5, 0x7ffa, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xb, 0x6, 0x1, 0xc000, 0x0, 0x0, 0x0, 0x0, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 15.079514538s ago: executing program 6 (id=5639): mkdir(0x0, 0x22) r0 = openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004855) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) fanotify_mark(0xffffffffffffffff, 0x1, 0x1000, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) 12.759129438s ago: executing program 2 (id=5640): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_open_procfs(0x0, &(0x7f0000019080)='net/route\x00') r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) mount$9p_rdma(&(0x7f0000000480), &(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,timeout=0x0000000000000002,timeout=0x0000000000000001,timeout=0xfffffc0000000000,timeout=0x0000000000000000,rq=0x0000000000000003,rq=0x0000000000000008,sq=0x0000000000000008,timeout=0x0000000000000052,access=any,noextend,obj_user=befs\x00,subj_role=@#$.,smackfsfloor=veth0_vlan\x00,smackfsroot={-%^#\\)$$,context=user_u,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c66736d616769633d307830303030303030b42be20299d43785302c65", @ANYRESDEC=0x0, @ANYBLOB=',']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) 4.052413639s ago: executing program 6 (id=5642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) r2 = openat$dir(0xffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) openat$incfs(r2, &(0x7f00000002c0)='.pending_reads\x00', 0x8400, 0xe8c4c36ccd490805) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x804) r4 = openat$ptmx(0xffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r5, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44, 0x1}) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000140)=0x3ff) prctl$PR_SET_NAME(0x4, 0x0) r6 = syz_clone(0x0, 0x0, 0x24, 0x0, 0x0, 0x0) get_robust_list(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x7c, 0x9, 0x2, 0x8}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffff9c, &(0x7f0000000200), 0x8040, 0x0) r7 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 4.050753658s ago: executing program 8 (id=5643): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000040)={"0e93035c8a923239cf4ff4116fa89a12b2140684d4d3f7a280938603120f", 0x1000, 0x2, 0x401, 0x80, 0x1, 0x9e9, 0xe0, 0x6, [0x7, 0x40, 0xffff, 0x10, 0x3, 0x8000, 0x8, 0x4, 0xfff, 0x78, 0x8, 0x5, 0xf, 0x6, 0x2, 0x7, 0x3ff, 0x7, 0x800000]}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x48212b8952c3aff5, 0x70bd27, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r4, 0x0, 0x0, 0x6008041, &(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80) 4.011303841s ago: executing program 2 (id=5645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000060000000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414bb0800000000000000"], 0x10) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$vcsu(0xffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000000)={0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x10, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x0, r1}}, 0x3c) 4.010432592s ago: executing program 1 (id=5646): r0 = memfd_create(&(0x7f0000000100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xacVsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_UQji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xfc\x86\xb6B\xb5!:\x90bMTo\xf7\xba$\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x9) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0xd, 0x7fffffff}]}, 0xc, 0x1) fchown(r0, 0x0, 0x0) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(r1, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80046601, &(0x7f00000000c0)) 4.009932741s ago: executing program 8 (id=5647): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000500)) 3.979740363s ago: executing program 6 (id=5648): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x200000000000001d, &(0x7f0000000480)=ANY=[@ANYBLOB="1700000004000080140d00005c00000002600000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/162, 0xa2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/44, 0x2c, 0x40000102, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000180)={0x5, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x10000}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) close(r3) openat(0xffffffffffffff9c, 0x0, 0x30042, 0x9) 3.444739921s ago: executing program 8 (id=5649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=0x1, 0x4) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x80000, 0x3, 0x3b7}, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @private}, &(0x7f0000000500)=0xc) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0xce, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000340)={0x3ff, 0x6, 0x8, 0x9, 0x0, 0xa, 0x80000006, 0x2}, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sequencer(0xffffff9c, &(0x7f00000002c0), 0x404000, 0x0) ptrace$ARCH_GET_FS(0x1e, 0xffffffffffffffff, &(0x7f0000000540), 0x1003) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x4e, 0x0, 0x66b, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7800, 0x20, 0x5, 0x101}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000200)={r2, &(0x7f0000000100)='ethtool\x00', 0x10183, &(0x7f0000000140)={@align=0x8, {0x843, 0x6, 0x2, 0x5}}, 0xfffffffd, &(0x7f0000000180)={@_ha_fsid}, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, 0x0) close(r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x0) 3.444402405s ago: executing program 2 (id=5650): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x1000)=nil, 0x1000, 0x64) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = openat$qrtrtun(0xffffff9c, &(0x7f0000000240), 0x226902) mmap$qrtrtun(&(0x7f000085a000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES16=r2], 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"/47], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0xa, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) close(r4) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[], 0x24, 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f00000004c0)=[{0x0}], 0x1, 0xa, 0x6c8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x27, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40088c0) 3.444130011s ago: executing program 6 (id=5651): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x5c) syz_open_dev$usbfs(0x0, 0xf, 0x8041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r6) close(r4) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r7, &(0x7f0000001480)=0x2, 0x12) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r9, 0x0, r10, 0x0, 0x38f9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 3.4438513s ago: executing program 1 (id=5652): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x50000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1002000ff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.376857534s ago: executing program 1 (id=5653): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) socket$inet6(0xa, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000100000001000880000000ffff00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r3, r2}) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sockstat\x00') pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 2.032354654s ago: executing program 1 (id=5654): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) acct(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0xfffff00c}, {0xb1, 0x20, 0x40, 0xffffefff}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r1, &(0x7f0000000100), 0x0, 0x1400c800) syz_open_dev$usbmon(0x0, 0x0, 0x181000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) sched_setscheduler(r4, 0x3, &(0x7f0000000180)=0x6) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r7, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 1.590847295s ago: executing program 8 (id=5655): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101400, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$comedi(0xffffff9c, 0x0, 0x300, 0x0) ioctl$COMEDI_CHANINFO(r1, 0x80206403, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sigaltstack(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffd, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, 0x0) 758.097438ms ago: executing program 1 (id=5656): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) dup(r3) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180a0000000000000000000000000000850000006600000095"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 614.077369ms ago: executing program 1 (id=5657): socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bfe5f230dc5336a60596"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_init1(0x80800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 330.089361ms ago: executing program 2 (id=5658): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r4, 0x0, 0x0, 0x100000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x3) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f0000000380)={0x7fffffff, 0xb4, 0x0, 0x0, 0xda, 0x5, 0x0, &(0x7f0000000300)=[{0x15, 0xfe, 0xac83}, {0x15, 0x0, 0x9}, {0xffffffff, 0x101, 0x2}, {0x14, 0xfe, 0x5}, {0x15, 0x0, 0x10000}]}) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="04000240"], 0x38}}, 0xc000) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) 144.992653ms ago: executing program 8 (id=5659): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req={0x3, 0x6, 0x7}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002780)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfff7, 0x3}, 0x88) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000180)}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/97, 0x61}], 0x7) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='4:,=\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$igmp6(0xa, 0x3, 0x2) 0s ago: executing program 6 (id=5660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r3, 0x0, 0x24000052) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) accept4(r2, 0x0, 0x0, 0x80800) write$cgroup_int(r5, &(0x7f0000000100)=0x8000000000000000, 0x12) kernel console output (not intermixed with test programs): executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 2070.447571][ T42] audit: type=1326 audit(1783387496.996:13903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.6.4845" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 2070.810357][T12822] zl10353_read_register: readreg error (reg=127, ret==0) [ 2070.812726][T12822] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2070.816972][T17876] dtv5100: wlen = 0, aborting. [ 2070.822374][T12822] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2070.893167][T12822] usb 6-1: USB disconnect, device number 28 [ 2071.017062][T12822] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2071.614494][T17958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4846'. [ 2071.619031][T17958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4846'. [ 2071.744043][ T4104] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 2071.853547][T17984] binder: 17981:17984 ioctl c00c620f 800003c0 returned -22 [ 2071.917581][ T4104] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2071.921333][ T4104] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.931847][ T4104] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2071.944027][ T4104] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.962699][ T4104] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2071.974403][ T4104] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2071.987589][ T4104] usb 11-1: Product: syz [ 2071.989148][ T4104] usb 11-1: Manufacturer: syz [ 2072.006513][ T4104] cdc_wdm 11-1:1.0: skipping garbage [ 2072.018523][ T4104] cdc_wdm 11-1:1.0: skipping garbage [ 2072.041818][ T4104] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 2072.046022][ T4104] cdc_wdm 11-1:1.0: Unknown control protocol [ 2072.248297][T12465] usb 11-1: USB disconnect, device number 24 [ 2072.643373][T17376] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2072.652521][T17376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2072.675331][T17376] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2072.687174][T17376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2072.693685][T17376] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2072.715988][T17376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2072.737741][T17376] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2072.752776][T17376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2072.824071][T12465] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 2072.976599][T12465] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2072.983452][T12465] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2072.992652][T12465] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2073.001760][T12465] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.009198][T17376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2073.017236][T12465] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2073.022373][T12465] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2073.034465][T12465] usb 11-1: Product: syz [ 2073.036244][T12465] usb 11-1: Manufacturer: syz [ 2073.056277][T12465] cdc_wdm 11-1:1.0: skipping garbage [ 2073.063073][T17376] 8021q: adding VLAN 0 to HW filter on device team0 [ 2073.070862][T12465] cdc_wdm 11-1:1.0: skipping garbage [ 2073.089511][T31772] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.092230][T31772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2073.105277][T12465] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 2073.107231][T12465] cdc_wdm 11-1:1.0: Unknown control protocol [ 2073.138972][T31740] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.143221][T31740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.581529][T17376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2073.873243][T17376] veth0_vlan: entered promiscuous mode [ 2073.891122][T17376] veth1_vlan: entered promiscuous mode [ 2073.935899][T17376] veth0_macvtap: entered promiscuous mode [ 2073.948047][T17376] veth1_macvtap: entered promiscuous mode [ 2073.975603][T17376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2073.993663][T17376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2074.015417][T11194] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.021622][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 2074.025013][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 2074.025601][T11194] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.028367][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 2074.034473][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 2074.038392][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 2074.041542][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 2074.045283][ T4104] usb 11-1: USB disconnect, device number 25 [ 2074.045455][T11194] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.048388][ C2] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 2074.054611][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 2074.057526][ C2] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2074.066100][T11194] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.169338][T18097] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4852'. [ 2074.175845][T18097] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4852'. [ 2074.304267][T20948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.311581][T20948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.377401][T31772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.382168][T31772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2076.584337][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4851'. [ 2076.974450][T12822] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2077.157318][T12822] usb 6-1: Using ep0 maxpacket: 16 [ 2077.240767][T12822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.291913][T12822] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2077.361990][T12822] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2077.380749][T12822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.403666][T18154] loop5: detected capacity change from 0 to 7 [ 2077.631703][T18154] Dev loop5: unable to read RDB block 7 [ 2077.635116][T18154] loop5: unable to read partition table [ 2077.641258][T18154] loop5: partition table beyond EOD, truncated [ 2077.645453][T18154] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2077.828916][T12822] usb 6-1: config 0 descriptor?? [ 2078.226245][T18151] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2078.233593][T18151] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2078.237171][T18151] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2078.261938][T18151] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2078.265278][T18151] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2078.279064][T18151] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2078.326267][T18166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2078.359432][T18166] 8021q: adding VLAN 0 to HW filter on device team0 [ 2078.368210][T18166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2078.402748][T18166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2078.407012][T18166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2078.413708][T18166] veth1_vlan: left promiscuous mode [ 2078.419075][T18166] veth0_vlan: left promiscuous mode [ 2078.422915][T18166] veth0_vlan: entered promiscuous mode [ 2078.427725][T18166] veth1_vlan: entered promiscuous mode [ 2078.432524][T18166] veth1_macvtap: left promiscuous mode [ 2078.437608][T18166] veth0_macvtap: left promiscuous mode [ 2078.440854][T18166] veth0_macvtap: entered promiscuous mode [ 2078.443474][T18166] veth1_macvtap: entered promiscuous mode [ 2078.450375][T18166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2078.456013][T18166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2078.460852][T18166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2078.466171][T18166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2078.471337][T18166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2078.481757][T18166] bridge0: port 1(vlan2) entered blocking state [ 2078.484610][T18166] bridge0: port 1(vlan2) entered forwarding state [ 2078.491324][T18166] geneve0: entered promiscuous mode [ 2078.498623][T18166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2078.510058][T12391] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 2078.553792][T11194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.557822][T11194] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2078.561556][T11194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.568110][T11194] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2078.578012][T11194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.583685][T11194] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2078.592296][T11194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.596864][T11194] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2078.665838][T12391] usb 13-1: Using ep0 maxpacket: 16 [ 2078.673848][T12391] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2078.693533][T12391] usb 13-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 2078.702934][T12391] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.719390][T12391] usb 13-1: config 0 descriptor?? [ 2078.795961][T12822] usbhid 6-1:0.0: can't add hid device: -71 [ 2078.798829][T12822] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2078.883777][T12822] usb 6-1: USB disconnect, device number 29 [ 2079.183081][T18165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.197639][T18165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2079.220695][T12391] usbhid 13-1:0.0: can't add hid device: -71 [ 2079.220761][T12391] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 2079.224471][T12391] usb 13-1: USB disconnect, device number 28 [ 2079.332347][T18210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4861'. [ 2079.484609][ T5756] Bluetooth: hci2: command 0x0401 tx timeout [ 2080.225133][T18227] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4865'. [ 2080.274225][ T5756] Bluetooth: hci1: command 0x0c1a tx timeout [ 2080.279750][ T5756] Bluetooth: hci4: command 0x0406 tx timeout [ 2081.024106][ T4104] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 2081.116465][T18240] qnx6: unable to set blocksize [ 2081.176099][ T4104] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.180038][ T4104] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2081.183804][ T4104] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 2081.188929][ T4104] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2081.192022][ T4104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.199118][T18234] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2081.205292][ T4104] hub 7-1:1.0: bad descriptor, ignoring hub [ 2081.210084][ T4104] hub 7-1:1.0: probe with driver hub failed with error -5 [ 2081.216207][ T4104] cdc_wdm 7-1:1.0: skipping garbage [ 2081.218135][ T4104] cdc_wdm 7-1:1.0: skipping garbage [ 2081.221924][ T4104] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2081.223860][ T4104] cdc_wdm 7-1:1.0: Unknown control protocol [ 2081.364167][T11991] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2081.378405][T18257] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2082.086217][T11991] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2082.091181][T11991] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2082.095549][T11991] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2082.099461][T11991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.109553][T18240] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2082.125026][T11991] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2082.364043][ T5756] Bluetooth: hci1: command 0x0c1a tx timeout [ 2082.367231][ T5756] Bluetooth: hci4: command 0x0406 tx timeout [ 2082.414081][T11991] usb 6-1: USB disconnect, device number 30 [ 2082.603859][T18285] udevd[18285]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2082.910191][T18232] hsr0 speed is unknown, defaulting to 1000 [ 2083.070062][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2083.072796][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2083.075857][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2083.078049][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2083.080375][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2083.082607][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2083.085148][ C2] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2083.087398][ C2] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2083.184156][T18232] netdevsim0 speed is unknown, defaulting to 1000 [ 2083.593197][T18327] loop8: detected capacity change from 0 to 524287999 [ 2083.670799][T17945] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 2084.374151][ T42] audit: type=1800 audit(1783387510.976:13904): pid=18295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4870" name="bus" dev="ramfs" ino=116803 res=0 errno=0 [ 2084.448827][ T5756] Bluetooth: hci1: command 0x0c1a tx timeout [ 2085.034724][T12822] usb 7-1: USB disconnect, device number 31 [ 2085.136946][T18348] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 2085.178363][T18360] erofs (device loop6): cannot find valid erofs superblock [ 2085.876501][T18366] tipc: Enabled bearer , priority 0 [ 2085.915193][T18366] syzkaller0: entered promiscuous mode [ 2085.917893][T18366] syzkaller0: entered allmulticast mode [ 2085.921361][T18366] tipc: Resetting bearer [ 2086.241027][ T9080] tipc: Resetting bearer [ 2086.318262][T18365] tipc: Resetting bearer [ 2086.674492][ T5097] Bluetooth: hci1: command 0x0c1a tx timeout [ 2090.263803][T18396] random: crng reseeded on system resumption [ 2095.348940][T18365] tipc: Disabling bearer [ 2095.370946][T11991] tipc: Node number set to 415848496 [ 2095.716098][T18416] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!`l1&b0xUϔr$G [ 2096.134095][T11991] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 2096.289687][T11991] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 2096.299770][T11991] usb 6-1: config 0 has no interface number 0 [ 2096.302041][T11991] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 2096.309052][T11991] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2096.315322][T11991] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2096.323746][T11991] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2096.333300][T11991] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2096.345743][T11991] usb 6-1: Product: syz [ 2096.347787][T11991] usb 6-1: SerialNumber: syz [ 2096.358096][T11991] usb 6-1: config 0 descriptor?? [ 2096.371716][T11991] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 2096.417302][T11991] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input62 [ 2096.801063][T18459] veth0_to_bridge: mtu less than device minimum [ 2098.304042][ T42] audit: type=1800 audit(1783387524.906:13905): pid=18466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4889" name="bus" dev="ramfs" ino=115833 res=0 errno=0 [ 2099.089212][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2099.091666][ T55] usb 6-1: USB disconnect, device number 31 [ 2099.092195][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2099.368588][ T55] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2102.065872][T18501] x_tables: duplicate underflow at hook 3 [ 2102.416862][T18513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4897'. [ 2102.424417][T18513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4897'. [ 2103.945450][T12391] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 2104.094178][T12391] usb 13-1: Using ep0 maxpacket: 16 [ 2104.098415][T12391] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2104.103186][T12391] usb 13-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2104.109927][T12391] usb 13-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2104.116848][T12391] usb 13-1: config 1 interface 1 has no altsetting 0 [ 2104.122574][T12391] usb 13-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 2104.128211][T12391] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.132897][T12391] usb 13-1: Product: syz [ 2104.138138][T12391] usb 13-1: Manufacturer: syz [ 2104.140535][T12391] usb 13-1: SerialNumber: syz [ 2104.423749][T18524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2104.429596][T18524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2105.269410][T18547] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2105.432012][T12391] usb 13-1: selecting invalid altsetting 0 [ 2105.525232][T12391] usb 13-1: USB disconnect, device number 29 [ 2105.650223][T18443] udevd[18443]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2105.675986][T12465] libceph: connect (1)[c::]:6789 error -101 [ 2105.695454][T12465] libceph: mon0 (1)[c::]:6789 connect error [ 2105.848312][T18560] ceph: No mds server is up or the cluster is laggy [ 2105.956125][T12465] libceph: connect (1)[c::]:6789 error -101 [ 2105.962317][T12465] libceph: mon0 (1)[c::]:6789 connect error [ 2106.773642][T12391] libceph: connect (1)[c::]:6789 error -101 [ 2106.783369][T12391] libceph: mon0 (1)[c::]:6789 connect error [ 2108.371554][T18609] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 2109.170321][T18634] qnx6: unable to set blocksize [ 2109.394390][T12391] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 2109.557894][T12391] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2109.563569][T12391] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2109.568285][T12391] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2109.571782][T12391] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.580537][T18631] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2109.589034][T12391] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 2109.739373][T18654] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4915'. [ 2109.789836][T12391] usb 13-1: USB disconnect, device number 30 [ 2111.269900][T18687] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2111.326991][T18687] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2111.333825][T18687] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 2111.341606][T18687] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2111.351524][T18687] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 2111.380627][T18687] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 2111.391609][T18687] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 2111.404769][T18687] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 2111.527067][T18687] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 2111.538251][T18687] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 2111.763339][ T5097] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2114.254817][ T4239] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2114.324255][T12806] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 2114.440331][ T4239] usb 7-1: Using ep0 maxpacket: 32 [ 2114.456956][ T4239] usb 7-1: config index 0 descriptor too short (expected 12827, got 27) [ 2114.476140][ T4239] usb 7-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 2114.482713][ T4239] usb 7-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 2114.490706][T12806] usb 11-1: Using ep0 maxpacket: 16 [ 2114.501351][ T4239] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 2114.509829][T12806] usb 11-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 2114.516256][T12806] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.527104][T12806] usb 11-1: Product: syz [ 2114.530189][T12806] usb 11-1: Manufacturer: syz [ 2114.535611][ T4239] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2114.540240][T12806] usb 11-1: SerialNumber: syz [ 2114.546789][ T4239] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2114.567629][ T4239] usb 7-1: Product: syz [ 2114.569606][ T4239] usb 7-1: Manufacturer: syz [ 2114.582558][ T4239] usb 7-1: SerialNumber: syz [ 2114.801252][T12806] usb 11-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 2114.839200][T12806] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2114.846579][T12806] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 2114.850324][T12806] usb 11-1: media controller created [ 2114.907919][T12806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2115.073757][T18716] netlink: 'syz.6.4921': attribute type 1 has an invalid length. [ 2115.353673][T18716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2115.354585][T12806] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2115.467197][T18746] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2115.554269][T12805] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 2115.594086][T18746] bond1: (slave batadv1): making interface the new active one [ 2115.602392][T18746] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 2115.724051][T12805] usb 13-1: Using ep0 maxpacket: 32 [ 2115.728161][T12805] usb 13-1: config index 0 descriptor too short (expected 13339, got 27) [ 2115.731721][T12805] usb 13-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 2115.736468][T12805] usb 13-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 2115.744145][T12805] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2115.748167][T12805] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2115.751311][T12805] usb 13-1: Product: syz [ 2115.753092][T12805] usb 13-1: Manufacturer: syz [ 2115.755209][T12805] usb 13-1: SerialNumber: syz [ 2116.021555][T18772] bond1 (unregistering): (slave batadv1): Releasing active interface [ 2116.031918][T18772] bond1 (unregistering): Released all slaves [ 2116.146989][T12805] usb 13-1: USB disconnect, device number 31 [ 2116.292898][T12806] dvb_usb_gl861 11-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 2116.311562][T12806] usb 11-1: USB disconnect, device number 26 [ 2116.316712][T18436] udevd[18436]: setting mode of /dev/bus/usb/011/026 to 020664 failed: No such file or directory [ 2116.323578][T18436] udevd[18436]: setting owner of /dev/bus/usb/011/026 to uid=0, gid=0 failed: No such file or directory [ 2116.811660][ T4239] usb 7-1: USB disconnect, device number 32 [ 2117.077038][T18876] x_tables: duplicate underflow at hook 3 [ 2117.433854][T18882] exFAT-fs (nbd6): unable to read boot sector [ 2117.436146][T18882] exFAT-fs (nbd6): failed to read boot sector [ 2117.438338][T18882] exFAT-fs (nbd6): failed to recognize exfat type [ 2119.456276][T18896] qnx6: unable to set blocksize [ 2120.368289][T18902] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2120.474496][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4928'. [ 2120.479008][T18903] bridge_slave_1: left allmulticast mode [ 2120.481974][T18903] bridge_slave_1: left promiscuous mode [ 2120.488926][T18903] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.601631][T18903] bridge_slave_0: left allmulticast mode [ 2120.606841][T18903] bridge_slave_0: left promiscuous mode [ 2120.614421][T18903] bridge0: port 1(bridge_slave_0) entered disabled state [ 2120.674096][T12465] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2120.835888][T18902] netlink: 'syz.2.4928': attribute type 1 has an invalid length. [ 2120.836051][T12465] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2120.844232][T12465] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2120.849355][T12465] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2120.853163][T12465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.860345][T18893] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2120.869825][T12465] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2121.264316][ T4239] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 2121.437938][ T4239] usb 13-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2121.442155][ T4239] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.446374][ T4239] usb 13-1: Product: syz [ 2121.448049][ T4239] usb 13-1: Manufacturer: syz [ 2121.449752][ T4239] usb 13-1: SerialNumber: syz [ 2121.603476][T12465] usb 6-1: USB disconnect, device number 32 [ 2121.746922][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4930'. [ 2121.752447][T18906] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4930'. [ 2121.758404][T18906] netlink: 'syz.8.4930': attribute type 13 has an invalid length. [ 2121.763540][T18906] netlink: 'syz.8.4930': attribute type 11 has an invalid length. [ 2121.798256][T18906] 9p: Bad value for 'wfdno' [ 2121.954568][ T4239] rtl8150 13-1:1.0: couldn't reset the device [ 2121.960529][ T4239] rtl8150 13-1:1.0: probe with driver rtl8150 failed with error -5 [ 2121.986544][ T4239] usb 13-1: USB disconnect, device number 32 [ 2125.037445][T18976] bridge0: port 2(bridge_slave_1) entered disabled state [ 2125.040105][T18976] bridge0: port 1(bridge_slave_0) entered disabled state [ 2125.480599][T18976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2125.488278][T18976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2126.990461][T18986] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2127.037111][T18998] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4938'. [ 2129.824228][T12465] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2130.782556][T12465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2131.000403][T12465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2131.000583][T19037] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2131.003863][T12465] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2131.007251][T12465] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2131.014105][T12465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.017427][T12465] usb 6-1: Product: syz [ 2131.019156][T12465] usb 6-1: Manufacturer: syz [ 2131.020694][T12465] usb 6-1: SerialNumber: syz [ 2131.027558][T12465] usb 6-1: config 0 descriptor?? [ 2131.858762][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2131.887812][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2131.982922][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2131.996945][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2132.021084][T12465] adutux 6-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 2132.048635][T12465] usb 6-1: USB disconnect, device number 33 [ 2133.414252][T19082] lo speed is unknown, defaulting to 1000 [ 2133.417560][T19082] lo speed is unknown, defaulting to 1000 [ 2133.434147][T19082] lo speed is unknown, defaulting to 1000 [ 2133.444898][T19082] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2133.452118][T19082] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2133.528740][T19082] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2133.606439][T19082] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2133.718351][T19082] lo speed is unknown, defaulting to 1000 [ 2133.735021][T19082] lo speed is unknown, defaulting to 1000 [ 2133.746656][T19082] lo speed is unknown, defaulting to 1000 [ 2133.758143][T19082] lo speed is unknown, defaulting to 1000 [ 2133.803359][T19082] lo speed is unknown, defaulting to 1000 [ 2133.824964][T19082] lo speed is unknown, defaulting to 1000 [ 2133.853236][T19082] lo speed is unknown, defaulting to 1000 [ 2133.868884][T19082] lo speed is unknown, defaulting to 1000 [ 2134.494078][ T4141] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2134.608243][ T42] audit: type=1800 audit(1783387561.246:13906): pid=19102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4951" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2134.613234][ T5947] kworker/1:7 (5947) used greatest stack depth: 17600 bytes left [ 2134.674310][ T4141] usb 7-1: Using ep0 maxpacket: 8 [ 2134.794775][T19102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2135.447219][ T4141] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2135.458344][ T4141] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2135.464165][ T4141] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2135.467894][ T4141] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2135.474704][ T4141] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2135.479443][ T4141] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.698592][ T4141] usb 7-1: GET_CAPABILITIES returned 0 [ 2135.700936][ T4141] usbtmc 7-1:16.0: can't read capabilities [ 2135.748939][T19101] create_pit_timer: 7 callbacks suppressed [ 2135.749005][T19101] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2136.565157][T19092] befs: Unknown parameter 'aN%vP\Ucl%' [ 2137.325942][ T4239] usb 7-1: USB disconnect, device number 33 [ 2137.728089][T19157] loop9: detected capacity change from 0 to 7 [ 2137.739829][T19157] Dev loop9: unable to read RDB block 7 [ 2137.741872][T19157] loop9: unable to read partition table [ 2137.748632][T19157] loop9: partition table beyond EOD, truncated [ 2137.751386][T19157] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2138.053033][ T6117] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 2138.405042][ T6117] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2138.502461][ T6117] usb 7-1: not running at top speed; connect to a high speed hub [ 2138.516024][ T6117] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2138.519534][ T6117] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2138.523696][ T6117] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2138.548143][ T6117] usb 7-1: string descriptor 0 read error: -22 [ 2138.551053][ T6117] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 2138.555286][ T6117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.624170][T12391] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2138.776574][T12391] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2138.781560][T12391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.792645][T12391] usb 6-1: config 0 descriptor?? [ 2139.902386][ T6117] usb 7-1: 0:2 : does not exist [ 2140.777709][T19211] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2140.791121][T19211] kvm: pic: level sensitive irq not supported [ 2140.791513][T19211] kvm: pic: non byte read [ 2140.803304][T19211] kvm: pic: level sensitive irq not supported [ 2140.803720][T19211] kvm: pic: non byte read [ 2140.810121][T19211] kvm: pic: level sensitive irq not supported [ 2140.881793][T19211] kvm: pic: non byte read [ 2140.912006][T19221] fuse: Unknown parameter 'f7qY-0x000000000000000a00000000000000000000' [ 2141.018901][ T6117] usb 7-1: USB disconnect, device number 34 [ 2141.337502][T12391] usb 6-1: Cannot set autoneg [ 2141.346958][T12391] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2141.354239][T12391] usb 6-1: USB disconnect, device number 34 [ 2142.565510][ T5097] Bluetooth: hci2: unexpected event for opcode 0x201c [ 2142.901122][T19255] x_tables: duplicate underflow at hook 1 [ 2144.059919][T19270] pim6reg: entered allmulticast mode [ 2144.063298][T19270] pim6reg: left allmulticast mode [ 2144.421915][T19279] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 2144.425041][T19279] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2144.464715][T19279] vhci_hcd vhci_hcd.0: Device attached [ 2144.749238][T11217] usb 54-1: SetAddress Request (82) to port 0 [ 2144.756981][T11217] usb 54-1: new SuperSpeed USB device number 82 using vhci_hcd [ 2144.806284][T19287] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2144.808713][T19287] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2144.812844][T19287] vhci_hcd vhci_hcd.0: Device attached [ 2145.085985][T19280] vhci_hcd: connection reset by peer [ 2145.123084][ T13] vhci_hcd vhci_hcd.8: stop threads [ 2145.154239][ T13] vhci_hcd vhci_hcd.8: release socket [ 2145.156738][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 2145.405413][ T4141] usb 11-1: new full-speed USB device number 27 using dummy_hcd [ 2145.408177][ T55] usb 40-1: SetAddress Request (10) to port 0 [ 2145.413268][ T55] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2145.489995][T19290] vhci_hcd: connection reset by peer [ 2145.492553][ T13] vhci_hcd vhci_hcd.1: stop threads [ 2145.500098][ T13] vhci_hcd vhci_hcd.1: release socket [ 2145.502148][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 2149.802289][T11217] usb 54-1: device descriptor read/8, error -110 [ 2149.822577][T19213] Set syz1 is full, maxelem 65536 reached [ 2150.073170][T19354] pim6reg: entered allmulticast mode [ 2150.090095][T19354] pim6reg: left allmulticast mode [ 2150.211739][T11217] usb usb54-port1: attempt power cycle [ 2150.614069][T11991] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 2150.685837][T19376] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 2150.787441][T11991] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 2150.793669][T11991] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 2150.798268][T11991] usb 6-1: config 150 has no interface number 0 [ 2150.801835][T11991] usb 6-1: config 150 interface 204 has no altsetting 0 [ 2150.807146][T11991] usb 6-1: config 150 interface 1 has no altsetting 0 [ 2150.813004][T11991] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2150.829808][T11991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.833894][T11991] usb 6-1: Product: syz [ 2150.840703][T11991] usb 6-1: Manufacturer: syz [ 2150.842802][T11991] usb 6-1: SerialNumber: syz [ 2151.142663][ T55] usb 40-1: device descriptor read/8, error -110 [ 2151.780752][T11217] usb usb54-port1: unable to enumerate USB device [ 2152.397819][ T55] usb usb40-port1: attempt power cycle [ 2152.460301][T19395] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2153.236907][ T55] usb usb40-port1: unable to enumerate USB device [ 2153.282091][T11991] xr_serial 6-1:150.204: skipping garbage [ 2153.295654][T11991] xr_serial 6-1:150.204: xr_serial converter detected [ 2153.306595][T11991] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 2153.315530][T11991] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2153.395300][T11991] usb 6-1: USB disconnect, device number 35 [ 2153.735880][T11991] xr_serial 6-1:150.204: device disconnected [ 2153.779690][T19422] loop9: detected capacity change from 0 to 7 [ 2153.791474][T19422] Dev loop9: unable to read RDB block 7 [ 2153.793468][T19422] loop9: unable to read partition table [ 2153.799527][T19422] loop9: partition table beyond EOD, truncated [ 2153.803309][T19422] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2153.864681][T19431] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2153.866821][T19431] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2153.875909][T19431] vhci_hcd vhci_hcd.0: Device attached [ 2154.064692][ T55] usb 13-1: new full-speed USB device number 33 using dummy_hcd [ 2154.114237][T11991] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2154.179841][T27036] usb 42-1: SetAddress Request (38) to port 0 [ 2154.184893][T27036] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 2154.246943][ T55] usb 13-1: unable to get BOS descriptor or descriptor too short [ 2154.251459][ T55] usb 13-1: not running at top speed; connect to a high speed hub [ 2154.256596][ T55] usb 13-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2154.262106][ T55] usb 13-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2154.264072][T11991] usb 6-1: Using ep0 maxpacket: 8 [ 2154.268459][ T55] usb 13-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2154.270614][T11991] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2154.278700][T11991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2154.280641][ T55] usb 13-1: string descriptor 0 read error: -22 [ 2154.283515][T11991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2154.286394][ T55] usb 13-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 2154.286416][ T55] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.306110][T11991] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2154.311541][T11991] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2154.316733][T11991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.538218][T11991] usb 6-1: GET_CAPABILITIES returned 0 [ 2154.540617][T11991] usbtmc 6-1:16.0: can't read capabilities [ 2154.740594][ T55] usb 13-1: 0:2 : does not exist [ 2154.776102][T19423] befs: Unknown parameter 'aN%vP\Ucl%' [ 2154.819419][ T55] usb 13-1: USB disconnect, device number 33 [ 2154.895924][T12806] usb 6-1: USB disconnect, device number 36 [ 2155.106099][T19432] vhci_hcd: connection reset by peer [ 2155.108447][ T13] vhci_hcd vhci_hcd.2: stop threads [ 2155.110943][ T13] vhci_hcd vhci_hcd.2: release socket [ 2155.113595][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 2155.162448][T19480] pim6reg: entered allmulticast mode [ 2155.168679][T19480] pim6reg: left allmulticast mode [ 2156.029887][T19494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2156.764351][T19498] pim6reg: entered allmulticast mode [ 2156.797265][T19500] pim6reg: left allmulticast mode [ 2157.348192][ T42] audit: type=1800 audit(1783387583.986:13907): pid=19493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4989" name="bus" dev="ramfs" ino=117693 res=0 errno=0 [ 2157.844674][T19522] fuse: Unknown parameter 'f7qY-0x000000000000000a00000000000000000000' [ 2158.219330][T19524] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2159.025058][T19531] tipc: Can't bind to reserved service type 0 [ 2159.152489][T19534] qnx6: unable to set blocksize [ 2159.234101][T27036] usb 42-1: device descriptor read/8, error -110 [ 2159.315913][T19545] pim6reg: entered allmulticast mode [ 2159.319663][T19545] pim6reg: left allmulticast mode [ 2159.424286][T12806] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2159.626268][T12806] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2159.645815][T27036] usb usb42-port1: attempt power cycle [ 2159.648847][T12806] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2159.652797][T12806] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2159.656657][T12806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.271681][T27036] usb usb42-port1: unable to enumerate USB device [ 2160.470267][T19534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2160.479654][T12806] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2160.731184][T12806] usb 6-1: USB disconnect, device number 37 [ 2163.448609][T19623] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5002'. [ 2163.509930][T19604] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2168.134780][ T6117] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 2168.314419][ T6117] usb 11-1: Using ep0 maxpacket: 32 [ 2168.382443][ T6117] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2168.430944][ T6117] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2168.437599][ T6117] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2168.440185][ T6117] usb 11-1: Product: syz [ 2168.441757][ T6117] usb 11-1: Manufacturer: syz [ 2168.443465][ T6117] usb 11-1: SerialNumber: syz [ 2168.477671][ T6117] usb 11-1: config 0 descriptor?? [ 2168.514318][T19684] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2168.989663][T27036] usb 11-1: USB disconnect, device number 28 [ 2169.093245][T19732] qnx6: unable to set blocksize [ 2169.364690][ T4239] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2169.939871][ T4239] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2170.260307][T19746] fuse: Unknown parameter 'f7qY-0x000000000000000a00000000000000000000' [ 2170.381454][ T4239] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2170.384932][ T4239] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2170.388135][ T4239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.425602][T19732] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2170.433779][ T4239] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2170.526190][T19762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5022'. [ 2170.696030][ T4239] usb 6-1: USB disconnect, device number 38 [ 2170.706451][T19762] team0 (unregistering): Port device team_slave_0 removed [ 2170.778786][T19762] team0 (unregistering): Port device team_slave_1 removed [ 2171.754053][T12806] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 2171.764952][T19800] ubi: mtd0 is already attached to ubi16 [ 2171.789116][T19800] netlink: 'syz.1.5016': attribute type 21 has an invalid length. [ 2171.794317][T19800] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5016'. [ 2171.804601][T19800] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5016'. [ 2171.916004][T12806] usb 7-1: Using ep0 maxpacket: 32 [ 2171.932073][T12806] usb 7-1: config index 0 descriptor too short (expected 12827, got 27) [ 2171.936535][T12806] usb 7-1: config 32 has too many interfaces: 52, using maximum allowed: 32 [ 2171.948541][T12806] usb 7-1: config 32 has an invalid descriptor of length 107, skipping remainder of the config [ 2171.961864][T12806] usb 7-1: config 32 has 0 interfaces, different from the descriptor's value: 52 [ 2171.974079][T12806] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2171.979871][T12806] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2171.983375][T12806] usb 7-1: Product: syz [ 2171.985830][T12806] usb 7-1: Manufacturer: syz [ 2171.987518][T12806] usb 7-1: SerialNumber: syz [ 2172.036198][T19804] JFS: charset not found [ 2172.810296][T19820] IPv6: Can't replace route, no match found [ 2173.108197][T19825] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2173.883500][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2173.992091][T27036] IPVS: starting estimator thread 0... [ 2174.050326][T12806] usb 7-1: USB disconnect, device number 35 [ 2174.104222][T19832] IPVS: using max 44 ests per chain, 105600 per kthread [ 2174.411902][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2175.230665][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'. [ 2175.236219][T19850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5024'. [ 2175.564314][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2176.384129][T19856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2176.420763][T19855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2176.449532][T19855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2176.734261][T11991] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2177.084152][T11991] usb 6-1: Using ep0 maxpacket: 8 [ 2177.088141][T11991] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2177.093310][T11991] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2177.098407][T11991] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2177.101496][T11991] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2177.162907][T11991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.257451][T11991] usb 6-1: config 0 descriptor?? [ 2177.329768][T19878] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 2178.290386][T19860] syzkaller1: entered promiscuous mode [ 2178.293013][T19860] syzkaller1: entered allmulticast mode [ 2179.036322][T19860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2179.044871][T19860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2179.275866][T11991] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 2179.280195][T11991] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 2179.283359][T11991] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 2179.286470][T11991] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 2179.289433][T11991] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 2179.301316][T11991] mcp2221 0003:04D8:00DD.0021: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2179.590007][T19909] netlink: 'syz.8.5031': attribute type 2 has an invalid length. [ 2179.692031][T19909] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 32624. macoff=96 [ 2179.696203][T19909] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 2179.724355][T27036] usb 6-1: USB disconnect, device number 39 [ 2180.081669][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5032'. [ 2180.232942][T19942] fuse: Unknown parameter 'f7qY-0x000000000000000a00000000000000000000' [ 2180.263097][T19943] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2181.160792][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5036'. [ 2181.164457][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5036'. [ 2182.058586][T19959] rdma_rxe: rxe_newlink: failed to add lo [ 2182.262931][T19968] siw: device registration error -23 [ 2183.695095][T12806] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 2183.769107][T19996] pim6reg: entered allmulticast mode [ 2183.837019][T19996] pim6reg: left allmulticast mode [ 2183.937512][T12806] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2183.945718][T12806] usb 6-1: config 0 has no interface number 0 [ 2183.964228][T12806] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2183.975800][T12806] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2183.991181][T12806] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2184.013104][T12806] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2184.032668][T12806] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2184.043319][T12806] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2184.070107][T12806] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2184.088710][T12806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.215807][T12806] usb 6-1: config 0 descriptor?? [ 2184.322992][T19980] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2184.381432][T19980] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2184.726598][T12806] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2186.069893][T20032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5045'. [ 2186.080159][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5045'. [ 2186.167493][T20033] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2186.989611][T27036] usb 6-1: USB disconnect, device number 40 [ 2187.045731][T27036] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2187.652014][ T42] audit: type=1800 audit(1783387614.286:13908): pid=20028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5044" name="bus" dev="ramfs" ino=120020 res=0 errno=0 [ 2187.850199][T20049] netlink: 'syz.1.5046': attribute type 13 has an invalid length. [ 2188.290738][T20082] netlink: 'syz.6.5048': attribute type 1 has an invalid length. [ 2188.593484][T20052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2188.606979][T20052] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2188.727465][T20052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2188.757453][T20052] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2188.977152][T19942] Set syz1 is full, maxelem 65536 reached [ 2188.988622][T20052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2188.993889][T20052] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2189.468915][T20102] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5050'. [ 2190.021688][T20116] team0: Port device xfrm0 added [ 2190.355823][T20128] netlink: 'syz.8.5055': attribute type 2 has an invalid length. [ 2190.361741][T20128] No source specified [ 2190.575116][T20134] sch_tbf: burst 1023 is lower than device lo mtu (32783) ! [ 2191.779779][T20145] bridge1: entered promiscuous mode [ 2191.900057][T20145] bridge1: entered allmulticast mode [ 2191.955170][T20145] netlink: 'syz.8.5058': attribute type 1 has an invalid length. [ 2192.128523][T20146] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2192.131123][T20146] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2192.288010][T20146] vhci_hcd vhci_hcd.0: Device attached [ 2192.662016][T27036] usb 42-1: SetAddress Request (42) to port 0 [ 2192.672884][T27036] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 2193.604653][T20151] vhci_hcd: connection reset by peer [ 2193.607479][ T8930] vhci_hcd vhci_hcd.2: stop threads [ 2193.609934][ T8930] vhci_hcd vhci_hcd.2: release socket [ 2193.623262][ T8930] vhci_hcd vhci_hcd.2: disconnect device [ 2194.389498][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2194.394649][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2194.957084][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2197.336893][T20206] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2197.696756][T20201] fuse: Unknown parameter 'f7qY-0x000000000000000a00000000000000000000' [ 2197.821130][T20210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5067'. [ 2197.911826][T20210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5067'. [ 2198.133111][T27036] usb 42-1: device descriptor read/8, error -110 [ 2198.165255][T12806] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 2198.351125][T12806] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 2198.356036][T12806] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.363227][T12806] usb 7-1: config 0 has no interfaces? [ 2198.366377][T12806] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2198.370948][T12806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.396185][T12806] usb 7-1: config 0 descriptor?? [ 2198.687809][T27036] usb usb42-port1: attempt power cycle [ 2199.631986][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5068'. [ 2199.642729][T20217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5068'. [ 2199.765629][T27036] usb usb42-port1: unable to enumerate USB device [ 2202.322377][T20244] 9p: Bad value for 'wfdno' [ 2202.416032][T20246] netlink: 'syz.1.5070': attribute type 1 has an invalid length. [ 2203.384870][T12806] usb 7-1: string descriptor 0 read error: -71 [ 2203.389305][T12806] usb 7-1: USB disconnect, device number 36 [ 2203.480420][T20255] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2203.482486][T20255] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2203.489447][T20255] vhci_hcd vhci_hcd.0: Device attached [ 2203.566917][T20255] geneve2: entered allmulticast mode [ 2203.775507][T27036] usb 50-1: SetAddress Request (2) to port 0 [ 2203.778077][T27036] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2204.743607][T20256] vhci_hcd: connection reset by peer [ 2204.763844][T20274] hsr0 speed is unknown, defaulting to 1000 [ 2204.784482][T11825] vhci_hcd vhci_hcd.6: stop threads [ 2204.786395][T11825] vhci_hcd vhci_hcd.6: release socket [ 2204.803392][T11825] vhci_hcd vhci_hcd.6: disconnect device [ 2205.574898][T20274] netdevsim0 speed is unknown, defaulting to 1000 [ 2205.582660][T20274] lo speed is unknown, defaulting to 1000 [ 2205.916730][T20296] CIFS mount error: No usable UNC path provided in device string! [ 2205.916730][T20296] [ 2205.921880][T20296] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2205.961545][T20329] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2205.963964][T20329] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2206.031923][T20329] vhci_hcd vhci_hcd.0: Device attached [ 2206.280586][T20347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5080'. [ 2206.361457][ T4141] usb 42-1: SetAddress Request (46) to port 0 [ 2206.364750][ T4141] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd [ 2206.525603][T20341] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2206.691502][T20339] vhci_hcd: connection reset by peer [ 2206.700814][ T5819] vhci_hcd vhci_hcd.2: stop threads [ 2206.705818][ T5819] vhci_hcd vhci_hcd.2: release socket [ 2206.707766][ T5819] vhci_hcd vhci_hcd.2: disconnect device [ 2207.220453][T20361] binder: 20356:20361 ioctl c018620c 80000140 returned -1 [ 2207.317656][T20364] netlink: 'syz.8.5081': attribute type 1 has an invalid length. [ 2209.161142][T27036] usb 50-1: device descriptor read/8, error -110 [ 2209.578622][T27036] usb usb50-port1: attempt power cycle [ 2210.253369][T27036] usb usb50-port1: unable to enumerate USB device [ 2210.639054][T20405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5089'. [ 2210.688539][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5089'. [ 2210.781601][T20411] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2210.863131][T20395] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 2211.116557][T12806] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 2211.811671][ T4141] usb 42-1: device descriptor read/8, error -110 [ 2211.811940][T12806] usb 11-1: Using ep0 maxpacket: 32 [ 2211.818001][T12806] usb 11-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2211.822593][T12806] usb 11-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 2211.828794][T12806] usb 11-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2211.832613][T12806] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.835870][T12806] usb 11-1: Product: syz [ 2211.838051][T12806] usb 11-1: Manufacturer: syz [ 2211.840521][T12806] usb 11-1: SerialNumber: syz [ 2212.210954][T12806] usb 11-1: USB disconnect, device number 29 [ 2212.228852][ T4141] usb usb42-port1: attempt power cycle [ 2212.857631][ T4141] usb usb42-port1: unable to enumerate USB device [ 2213.064833][T20440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5097'. [ 2213.759134][T20443] netlink: 'syz.2.5092': attribute type 1 has an invalid length. [ 2214.620086][T20462] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2214.860096][T11991] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 2215.754396][T20499] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2216.299869][T20514] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2216.367875][T20522] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2217.062260][T20552] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2218.215953][T20542] netlink: 'syz.8.5128': attribute type 1 has an invalid length. [ 2219.178548][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5131'. [ 2219.210210][T20576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5131'. [ 2219.408350][T20588] qnx6: unable to set blocksize [ 2219.665740][T11991] usb 13-1: new high-speed USB device number 34 using dummy_hcd [ 2219.838788][T11991] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2219.843542][T11991] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2219.848355][T11991] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2219.852674][T11991] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.864199][T20588] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2219.879793][T11991] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 2220.090165][T11991] usb 13-1: USB disconnect, device number 34 [ 2220.169034][T20613] pim6reg: entered allmulticast mode [ 2220.761108][T20634] hsr0 speed is unknown, defaulting to 1000 [ 2220.986113][T20652] netlink: 'syz.8.5143': attribute type 10 has an invalid length. [ 2221.000793][T20652] ipvlan0: entered allmulticast mode [ 2221.003055][T20652] veth0_vlan: entered allmulticast mode [ 2221.021510][T20652] team0: Device ipvlan0 failed to register rx_handler [ 2221.222331][T20634] netdevsim0 speed is unknown, defaulting to 1000 [ 2221.228385][T20634] lo speed is unknown, defaulting to 1000 [ 2221.636136][T20690] netlink: 'syz.8.5148': attribute type 4 has an invalid length. [ 2221.641578][T20690] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5148'. [ 2221.676539][T20690] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2221.777802][T20691] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5147'. [ 2221.995051][ T42] audit: type=1800 audit(1783387646.605:13909): pid=20650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5142" name="bus" dev="ramfs" ino=120683 res=0 errno=0 [ 2222.104461][T20702] ubi16: detaching mtd0 [ 2222.118546][T20702] ubi16: mtd0 is detached [ 2222.425166][T20717] input: syz0 as /devices/virtual/input/input64 [ 2223.416501][T11991] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2223.577079][T11991] usb 7-1: Using ep0 maxpacket: 32 [ 2223.590419][T11991] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.594514][T11991] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 2223.603212][T11991] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2223.607356][T11991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.611616][T11991] usb 7-1: Product: syz [ 2223.613290][T11991] usb 7-1: Manufacturer: syz [ 2223.615695][T11991] usb 7-1: SerialNumber: syz [ 2223.838914][T20735] pim6reg: entered allmulticast mode [ 2223.849654][T20735] pim6reg: left allmulticast mode [ 2224.184887][T11991] usb 7-1: USB disconnect, device number 37 [ 2224.727353][T20753] sch_tbf: burst 1023 is lower than device lo mtu (32783) ! [ 2225.015570][T20757] pim6reg: entered allmulticast mode [ 2225.023506][T20757] pim6reg: left allmulticast mode [ 2225.159369][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2225.164247][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2225.631220][T20790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5178'. [ 2225.673324][T20794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5169'. [ 2226.115501][T20820] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2226.157829][T20823] netlink: 2542 bytes leftover after parsing attributes in process `syz.1.5182'. [ 2230.398853][T20870] input: syz0 as /devices/virtual/input/input65 [ 2230.460204][T20876] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2231.843786][T20989] pim6reg: entered allmulticast mode [ 2231.850055][T20989] pim6reg: left allmulticast mode [ 2232.058993][T21018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5244'. [ 2232.082857][T11991] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2232.144969][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5247'. [ 2232.253597][T11991] usb 6-1: Using ep0 maxpacket: 16 [ 2232.260820][T11991] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2232.265607][T11991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.268402][T11991] usb 6-1: Product: syz [ 2232.269814][T11991] usb 6-1: Manufacturer: syz [ 2232.274490][T11991] usb 6-1: SerialNumber: syz [ 2232.280220][T11991] usb 6-1: config 0 descriptor?? [ 2232.728845][T11991] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2232.733184][T11991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2232.740889][T11991] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2232.756022][T11991] usb 6-1: media controller created [ 2232.763014][T11991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2232.940807][T11991] zl10353_read_register: readreg error (reg=127, ret==0) [ 2232.943294][T11991] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2232.953599][T11991] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2232.958340][T11991] usb 6-1: USB disconnect, device number 41 [ 2232.985396][T11991] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2233.099334][T21062] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2233.892172][T21078] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5255'. [ 2234.051330][T21087] qnx6: unable to set blocksize [ 2234.252063][T11991] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 2234.261668][T21108] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2234.305368][T12391] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 2234.412167][T11991] usb 13-1: Using ep0 maxpacket: 8 [ 2234.416337][T11991] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 2234.420723][T11991] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2234.424997][T11991] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2234.428134][T11991] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2234.431900][T11991] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2234.437617][T11991] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2234.441853][T11991] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.468562][T12391] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2234.473451][T12391] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2234.478111][T12391] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2234.482525][T12391] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.492415][T21087] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2234.499015][T12391] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 2234.728664][T11217] usb 11-1: USB disconnect, device number 30 [ 2235.262422][T21149] usbtmc 13-1:16.0: simple usb_control_msg failed -32 [ 2235.269371][T11217] usb 13-1: USB disconnect, device number 35 [ 2235.634918][T21162] pim6reg: left allmulticast mode [ 2236.038770][T21180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5272'. [ 2236.333889][T12824] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2236.487365][T21198] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2236.959615][T12824] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2236.962848][T12824] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2236.969519][T12824] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2236.981535][T12824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2236.990990][T12824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2237.027407][T12824] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2237.034302][T12824] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2237.037174][T12824] usb 7-1: Product: syz [ 2237.038715][T12824] usb 7-1: Manufacturer: syz [ 2237.088943][T12824] cdc_wdm 7-1:1.0: skipping garbage [ 2237.542237][T12824] cdc_wdm 7-1:1.0: skipping garbage [ 2237.613041][T12824] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2237.614938][T12824] cdc_wdm 7-1:1.0: Unknown control protocol [ 2237.739112][T21230] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2237.994626][T21233] vxcan0: tx address claim with different name [ 2238.236127][T12824] usb 7-1: USB disconnect, device number 38 [ 2238.794943][T21258] pim6reg: entered allmulticast mode [ 2238.799378][T21258] pim6reg: left allmulticast mode [ 2239.162779][T21286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5301'. [ 2239.202679][T21288] pim6reg: entered allmulticast mode [ 2239.207628][T21288] pim6reg: left allmulticast mode [ 2239.607761][T21317] sch_tbf: burst 1023 is lower than device lo mtu (32783) ! [ 2240.054951][T12824] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 2240.269464][T12824] usb 13-1: config index 0 descriptor too short (expected 45, got 36) [ 2240.281515][T12824] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.291074][T12824] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2240.301437][T12824] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2240.307496][T12824] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2240.333017][T12824] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.397100][T12824] usb 13-1: config 0 descriptor?? [ 2240.496786][T21337] lapbether: lapb_data_request error - 4 [ 2240.793394][T11217] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2240.799365][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2241.049051][T11217] usb 6-1: Using ep0 maxpacket: 8 [ 2241.083613][T11217] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2241.087006][T11217] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2241.099194][T11217] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2241.103541][T11217] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2241.107289][T11217] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2241.113243][T11217] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2241.117056][T11217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.253973][T12824] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 2241.318921][T12824] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2241.610079][T11217] usb 6-1: usb_control_msg returned -32 [ 2241.611986][T11217] usbtmc 6-1:16.0: can't read capabilities [ 2241.801400][T21391] pim6reg: entered allmulticast mode [ 2241.805255][T21391] pim6reg: left allmulticast mode [ 2241.848002][T11991] usb 6-1: USB disconnect, device number 42 [ 2242.181285][T21410] pim6reg: entered allmulticast mode [ 2242.186165][T21410] pim6reg: left allmulticast mode [ 2242.384195][ T5842] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 2242.571861][T21426] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2242.982470][ T5842] usb 11-1: Using ep0 maxpacket: 16 [ 2242.987828][ T5842] usb 11-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.992499][ T5842] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2242.995277][ T5842] usb 11-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2242.999043][ T5842] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.005066][ T5842] usb 11-1: config 0 descriptor?? [ 2243.151845][T21431] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3415406607 (54646505712 ns) > initial count (1924906624 ns). Using initial count to start timer. [ 2243.379265][T27036] usb 13-1: USB disconnect, device number 36 [ 2243.486017][ T5842] nzxt-smart2 0003:1E71:2009.0023: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 2243.632682][T21480] sch_tbf: burst 1023 is lower than device lo mtu (32783) ! [ 2243.709798][T21482] pim6reg: entered allmulticast mode [ 2243.713662][T21482] pim6reg: left allmulticast mode [ 2243.855353][ T42] audit: type=1326 audit(1783387667.062:13910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21492 comm="syz.2.5342" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x0 [ 2243.885635][T11991] usb 11-1: USB disconnect, device number 31 [ 2244.108227][T21510] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2244.537901][T21517] qnx6: unable to set blocksize [ 2244.831633][T11217] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 2244.977104][T21542] pim6reg: entered allmulticast mode [ 2244.984443][T21541] pim6reg: entered allmulticast mode [ 2244.987110][T21542] pim6reg: left allmulticast mode [ 2245.002802][T11217] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2245.008171][T21541] pim6reg: left allmulticast mode [ 2245.008224][T11217] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2245.015857][T11217] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2245.022826][T11217] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.047393][T21517] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2245.067374][T11217] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 2245.314878][T27036] usb 11-1: USB disconnect, device number 32 [ 2245.360347][T21585] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2246.279758][T21618] pim6reg: entered allmulticast mode [ 2246.288597][T21618] pim6reg: left allmulticast mode [ 2246.786713][T27036] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2246.872422][T12391] usb 11-1: new full-speed USB device number 33 using dummy_hcd [ 2246.946990][T27036] usb 7-1: Using ep0 maxpacket: 8 [ 2246.951293][T27036] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 2246.955010][T27036] usb 7-1: config 0 has no interface number 0 [ 2246.958036][T27036] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2246.962362][T27036] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2246.965462][T27036] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2246.970828][T27036] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 100, changing to 10 [ 2246.974652][T27036] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 26217, setting to 1024 [ 2246.978210][T27036] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2246.984638][T27036] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2246.988231][T27036] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.991541][T27036] usb 7-1: Product: syz [ 2246.992937][T27036] usb 7-1: Manufacturer: syz [ 2246.994717][T27036] usb 7-1: SerialNumber: syz [ 2246.998899][T27036] usb 7-1: config 0 descriptor?? [ 2247.005923][T21634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2247.044779][T12391] usb 11-1: config index 0 descriptor too short (expected 5924, got 36) [ 2247.047845][T12391] usb 11-1: config 250 has an invalid interface number: 228 but max is -1 [ 2247.050969][T12391] usb 11-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2247.054963][T12391] usb 11-1: config 250 has no interface number 0 [ 2247.057339][T12391] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 2247.060996][T12391] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2247.064552][T12391] usb 11-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 2247.070575][T12391] usb 11-1: config 250 interface 228 has no altsetting 0 [ 2247.075272][T12391] usb 11-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2247.079320][T12391] usb 11-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2247.083089][T12391] usb 11-1: Product: syz [ 2247.085242][T12391] usb 11-1: SerialNumber: syz [ 2247.099749][T12391] hub 11-1:250.228: bad descriptor, ignoring hub [ 2247.101931][T12391] hub 11-1:250.228: probe with driver hub failed with error -5 [ 2247.232754][T27036] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 2247.358285][T12391] usblp 11-1:250.228: usblp1: USB Bidirectional printer dev 33 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 2247.385177][T11991] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 2247.465266][ C1] iowarrior 7-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 2247.474422][T11217] usb 7-1: USB disconnect, device number 39 [ 2247.545448][T11991] usb 13-1: Using ep0 maxpacket: 16 [ 2247.550409][T11991] usb 13-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.555009][T11991] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2247.558009][T11991] usb 13-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2247.561960][T11991] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.568199][T11991] usb 13-1: config 0 descriptor?? [ 2247.686545][T12824] usb 11-1: USB disconnect, device number 33 [ 2247.719042][T12824] usblp1: removed [ 2248.069163][T12465] usb 11-1: new full-speed USB device number 34 using dummy_hcd [ 2248.086491][T11991] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 2248.288448][T12465] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 2248.294128][T12465] usb 11-1: can't read configurations, error -71 [ 2248.496413][T11991] usb 13-1: USB disconnect, device number 37 [ 2249.501012][T27036] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 2249.661348][T27036] usb 13-1: Using ep0 maxpacket: 16 [ 2249.666008][T27036] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2249.675490][T27036] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2249.681897][T27036] usb 13-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 2249.686761][T27036] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2249.691274][T27036] usb 13-1: Product: syz [ 2249.693385][T27036] usb 13-1: Manufacturer: syz [ 2249.696073][T27036] usb 13-1: SerialNumber: syz [ 2249.705604][T27036] usb 13-1: config 0 descriptor?? [ 2249.912641][T21762] pim6reg: entered allmulticast mode [ 2249.919447][T21762] pim6reg: left allmulticast mode [ 2249.938755][ C1] imon 13-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2249.950095][T27036] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input67 [ 2249.967396][T27036] imon:send_packet: packet tx failed (-71) [ 2249.982697][T27036] imon 13-1:0.0: panel buttons/knobs setup failed [ 2250.094105][T27036] rc_core: IR keymap rc-imon-pad not found [ 2250.096577][T27036] Registered IR keymap rc-empty [ 2250.104971][T27036] imon 13-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2250.113567][T27036] imon 13-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2250.117918][T27036] imon:send_packet: packet tx failed (-71) [ 2250.163757][T27036] imon 13-1:0.0: remote input dev register failed [ 2250.166109][T27036] imon 13-1:0.0: imon_init_intf0: rc device setup failed [ 2250.199000][T27036] imon 13-1:0.0: unable to initialize intf0, err 0 [ 2250.201685][T27036] imon:imon_probe: failed to initialize context! [ 2250.203905][T27036] imon 13-1:0.0: unable to register, err -19 [ 2250.211626][T27036] usb 13-1: USB disconnect, device number 38 [ 2250.321526][T21795] hsr0 speed is unknown, defaulting to 1000 [ 2250.436301][T21795] netdevsim0 speed is unknown, defaulting to 1000 [ 2250.449577][T21795] lo speed is unknown, defaulting to 1000 [ 2250.529233][T27036] usb 13-1: new full-speed USB device number 39 using dummy_hcd [ 2250.552675][ T42] audit: type=1326 audit(1783387673.332:13911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21794 comm="syz.2.5388" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13fec code=0x0 [ 2250.713348][T27036] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2250.717003][T27036] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 2250.721222][T27036] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2250.726498][T27036] usb 13-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 2250.730304][T27036] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.733187][T27036] usb 13-1: Product: syz [ 2250.734611][T27036] usb 13-1: Manufacturer: syz [ 2250.736355][T27036] usb 13-1: SerialNumber: syz [ 2250.740259][T27036] usb 13-1: config 0 descriptor?? [ 2250.746077][T21741] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2250.758479][T21824] fuse: root generation should be zero [ 2250.969001][ C1] imon 13-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2250.999465][T27036] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input69 [ 2251.291290][T27036] rc_core: IR keymap rc-imon-pad not found [ 2251.295337][T27036] Registered IR keymap rc-empty [ 2251.298997][T27036] imon 13-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2251.305206][T27036] imon 13-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2251.519020][T27036] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 2251.522146][T21840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5392'. [ 2251.556548][T27036] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input70 [ 2251.564931][T27036] imon 13-1:0.0: iMON device (15c2:0045, intf0) on usb<13:39> initialized [ 2251.709816][T21741] imon:lcd_write: invalid payload size: 0 (expected 8) [ 2251.744965][T12824] usb 13-1: USB disconnect, device number 39 [ 2251.839792][T21854] pim6reg: entered allmulticast mode [ 2251.845805][T21854] pim6reg: left allmulticast mode [ 2252.433798][T21898] syzkaller0: entered promiscuous mode [ 2252.436706][T21898] syzkaller0: entered allmulticast mode [ 2252.702700][T21908] pim6reg: entered allmulticast mode [ 2252.709286][T21908] pim6reg: left allmulticast mode [ 2253.465417][T27036] usb 13-1: new high-speed USB device number 40 using dummy_hcd [ 2253.663877][T27036] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2253.674497][T27036] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2253.677970][T27036] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2253.682340][T27036] usb 13-1: Product: syz [ 2253.683923][T27036] usb 13-1: Manufacturer: syz [ 2253.685742][T27036] usb 13-1: SerialNumber: syz [ 2253.691353][ T4239] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2253.855143][ T4239] usb 6-1: config index 0 descriptor too short (expected 9555, got 18) [ 2253.858695][ T4239] usb 6-1: config 0 has too many interfaces: 214, using maximum allowed: 32 [ 2253.863181][ T4239] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2253.868246][ T4239] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 214 [ 2253.874446][ T4239] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2253.878253][ T4239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.885023][ T4239] usb 6-1: config 0 descriptor?? [ 2253.930936][T27036] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2254.106805][T12465] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 2254.123042][ T4239] usb 6-1: string descriptor 0 read error: -71 [ 2254.128878][ T4239] usb 6-1: USB disconnect, device number 43 [ 2254.268893][T12465] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2254.272589][T12465] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2254.277856][T12465] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2254.283016][T12465] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2254.288429][T12465] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2254.295010][T12465] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2254.298284][T12465] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2254.304071][T12465] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2254.310534][T12465] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2254.315661][T12465] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2254.322130][T12465] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2254.325410][T12465] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2254.331528][T12465] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2254.336940][T12465] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2254.341928][T12465] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2254.350865][T12465] usb 7-1: string descriptor 0 read error: -22 [ 2254.354480][T12465] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2254.360153][T12465] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.374910][T12465] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 2254.607443][T12824] usb 7-1: USB disconnect, device number 40 [ 2254.727608][T21984] random: crng reseeded on system resumption [ 2255.047059][ T4239] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2255.218134][ T4239] usb 6-1: Using ep0 maxpacket: 16 [ 2255.232593][ T4239] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2255.237453][ T4239] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2255.240796][ T4239] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2255.245210][ T4239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.252892][ T4239] usb 6-1: config 0 descriptor?? [ 2255.298899][T21991] kvm: pic: non byte read [ 2255.302144][T21991] kvm: pic: level sensitive irq not supported [ 2255.302459][T21991] kvm: pic: non byte read [ 2255.308940][T21991] kvm: pic: level sensitive irq not supported [ 2255.309298][T21991] kvm: pic: non byte read [ 2255.315221][T21991] kvm: pic: level sensitive irq not supported [ 2255.315549][T21991] kvm: pic: non byte read [ 2255.321780][T21991] kvm: pic: level sensitive irq not supported [ 2255.322201][T21991] kvm: pic: non byte read [ 2255.330644][T21991] kvm: pic: level sensitive irq not supported [ 2255.330999][T21991] kvm: pic: non byte read [ 2255.336845][T21991] kvm: pic: level sensitive irq not supported [ 2255.337220][T21991] kvm: pic: non byte read [ 2255.679644][T22005] pim6reg: entered allmulticast mode [ 2255.685684][T22005] pim6reg: left allmulticast mode [ 2255.743100][ T4239] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2255.798976][ C0] usblp0: nonzero write bulk status received: -71 [ 2255.804029][ T5842] usb 13-1: USB disconnect, device number 40 [ 2255.835379][ T5842] usblp0: removed [ 2256.001187][T22027] syz_tun: entered allmulticast mode [ 2256.008458][T22026] syz_tun: left allmulticast mode [ 2256.159378][T27036] usb 6-1: USB disconnect, device number 44 [ 2256.795948][T22064] pim6reg: entered allmulticast mode [ 2256.807509][T22064] pim6reg: left allmulticast mode [ 2258.202825][T22112] qnx6: unable to set blocksize [ 2258.466716][T12465] usb 13-1: new high-speed USB device number 41 using dummy_hcd [ 2258.476202][T22124] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2258.631441][T12465] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2258.636581][T12465] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2258.643096][T12465] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2258.648248][T12465] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.664850][T22112] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2258.687437][T12465] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 2258.910381][T12824] usb 13-1: USB disconnect, device number 41 [ 2258.989271][ C3] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2259.375244][T22168] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2259.556708][ T5842] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 2259.717039][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 2259.720292][ T5842] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2259.723731][ T5842] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2259.727668][ T5842] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2259.731631][ T5842] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2259.738978][ T5842] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2259.741976][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.744570][ T5842] usb 7-1: Product: syz [ 2259.754371][ T5842] usb 7-1: Manufacturer: syz [ 2259.755970][ T5842] usb 7-1: SerialNumber: syz [ 2259.766617][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2259.783546][ T5842] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input71 [ 2260.005356][ T5842] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2260.009151][ T5842] (id 0x00) [ 2260.069517][ T5842] rc_core: IR keymap rc-imon-pad not found [ 2260.072093][ T5842] Registered IR keymap rc-empty [ 2260.073747][ T5842] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2260.076999][ T5842] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2260.220236][ T5842] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 2260.225713][ T5842] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input72 [ 2260.235507][ T5842] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:41> initialized [ 2260.326414][T27036] usb 13-1: new high-speed USB device number 42 using dummy_hcd [ 2260.486138][T22172] imon:send_packet: task interrupted [ 2260.490359][T22172] imon:send_packet: packet tx failed (-512) [ 2260.494625][T22172] imon:vfd_write: send packet #0 failed [ 2260.498720][T22172] imon:send_packet: task interrupted [ 2260.501164][T22172] imon:send_packet: packet tx failed (-512) [ 2260.503563][T22172] imon:vfd_write: send packet #0 failed [ 2260.505840][T22172] imon:send_packet: task interrupted [ 2260.507773][T22172] imon:send_packet: packet tx failed (-512) [ 2260.508099][T27036] usb 13-1: Using ep0 maxpacket: 32 [ 2260.509857][T22172] imon:vfd_write: send packet #0 failed [ 2260.518051][T22172] imon:send_packet: task interrupted [ 2260.520579][T22172] imon:send_packet: packet tx failed (-512) [ 2260.521261][T27036] usb 13-1: unable to get BOS descriptor or descriptor too short [ 2260.523017][T22172] imon:vfd_write: send packet #0 failed [ 2260.527902][T27036] usb 13-1: config 14 has an invalid interface number: 57 but max is 1 [ 2260.529149][T22172] imon:send_packet: task interrupted [ 2260.532309][T27036] usb 13-1: config 14 has an invalid interface number: 228 but max is 1 [ 2260.533842][T22172] imon:send_packet: packet tx failed (-512) [ 2260.537140][T27036] usb 13-1: config 14 has no interface number 0 [ 2260.537460][T22172] imon:vfd_write: send packet #0 failed [ 2260.544817][T27036] usb 13-1: config 14 has no interface number 1 [ 2260.546232][T22172] imon:send_packet: task interrupted [ 2260.547735][T27036] usb 13-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2260.547760][T27036] usb 13-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2260.547781][T27036] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2260.547799][T27036] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2260.547818][T27036] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2260.547839][T27036] usb 13-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2260.547891][T27036] usb 13-1: config 14 interface 57 has no altsetting 0 [ 2260.547908][T27036] usb 13-1: config 14 interface 228 has no altsetting 0 [ 2260.559784][T27036] usb 13-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2260.573927][T22172] imon:send_packet: packet tx failed (-512) [ 2260.575938][T27036] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.577792][T22172] imon:vfd_write: send packet #0 failed [ 2260.580416][T27036] usb 13-1: Product: syz [ 2260.588718][T22172] imon:send_packet: packet tx failed (-32) [ 2260.591481][T27036] usb 13-1: Manufacturer: syz [ 2260.595683][T22172] imon:vfd_write: send packet #0 failed [ 2260.599649][T27036] usb 13-1: SerialNumber: syz [ 2260.654469][T22213] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2260.774741][T12465] usb 7-1: USB disconnect, device number 41 [ 2261.075254][T27036] legousbtower 13-1:14.57: interrupt endpoints not found [ 2261.107981][T22250] qnx6: unable to set blocksize [ 2261.190220][T22257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5456'. [ 2261.469388][ T55] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 2261.504322][T27036] legousbtower 13-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 2261.537748][T27036] legousbtower 13-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 2261.632041][ T55] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2261.640237][ T55] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2261.645949][ T55] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2261.650405][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.663270][T22250] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2261.669755][ T55] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 2261.803210][ T42] audit: type=1800 audit(1783387683.859:13912): pid=22249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5453" name="/" dev="fuse" ino=4 res=0 errno=0 [ 2261.884318][ T55] usb 11-1: USB disconnect, device number 36 [ 2262.208837][T22447] pim6reg: entered allmulticast mode [ 2262.220773][T22445] pim6reg: left allmulticast mode [ 2262.323873][ C0] usb 13-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 2262.329174][ T55] usb 13-1: USB disconnect, device number 42 [ 2262.342284][ T55] legousbtower 13-1:14.228: LEGO USB Tower #-160 now disconnected [ 2262.775864][T27036] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2262.908683][T22477] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode [ 2262.919663][T22477] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode [ 2262.950854][T27036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2262.959390][T27036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2262.969403][T27036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2262.981555][T27036] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2262.985242][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5464'. [ 2262.990094][T27036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.995796][T27036] usb 6-1: Product: syz [ 2263.000891][T27036] usb 6-1: Manufacturer: syz [ 2263.002846][T27036] usb 6-1: SerialNumber: syz [ 2263.015378][T27036] usb 6-1: config 0 descriptor?? [ 2263.146825][T22489] kvm: pic: non byte read [ 2263.251654][T27036] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2263.562130][T22511] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 2263.622236][T22516] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2264.248900][ T42] audit: type=1804 audit(1783387686.152:13913): pid=22524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5473" name="/newroot/386/file0" dev="fuse" ino=1 res=1 errno=0 [ 2264.361717][T22532] binder: 22531:22532 ioctl c0306201 80000180 returned -14 [ 2264.576004][T22541] binder: 22540:22541 ioctl c0306201 800006c0 returned -11 [ 2264.729939][T22553] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2264.910219][ T5842] usb 13-1: new full-speed USB device number 43 using dummy_hcd [ 2265.072823][ T5842] usb 13-1: not running at top speed; connect to a high speed hub [ 2265.077590][ T5842] usb 13-1: config 1 interface 0 altsetting 40 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2265.083278][ T5842] usb 13-1: config 1 interface 0 has no altsetting 0 [ 2265.090493][ T5842] usb 13-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.40 [ 2265.095375][ T5842] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.100059][ T5842] usb 13-1: Manufacturer: ‘矿꺚宩꥞瓭쎔瓇欫鬶퐘캅蔹뻧ソﶪ햻鋨뛆㽪忥㼾⬘ถ宪࠘ذຒ⦾ᧈ䥪蒴풀⚽䗞刚ꖔ豯옄㇈剴둢꽴ꐅ䎷㉷嫟른ࢿ慜ힴ旦灳떣䚘᪑쇁뢩罌퀡﵇ᓧ㊊Ὺ緕ᠹ텸云 [ 2265.109286][ T5842] usb 13-1: SerialNumber: 㱁⒴緗懀듨櫌鱾ሉ໰ꄱ쪪鮃穅岊沌끇ﾈꢯ䬐䩕鰑᨜䬳ﳸ䨖픾鯀꫊悝⡅냹⇈傦傱폧쨛툹厴碾㨃䀮絓菵䘸⼇萋꯫ﭽ蝜ဧ੓쾊橺츓ʇ똇榒ꎫᇪ䘇ㇴ쨄Ꞗ쵐र癀弴켕尯檩△ઍ亂ᙬ辿该Ί詝嶭㉥ᕜ밮팏ᙗ堈蕢ฤ䰐㫱ສ [ 2265.358563][ T5842] usbhid 13-1:1.0: can't add hid device: -71 [ 2265.361222][ T5842] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 2265.370003][ T5842] usb 13-1: USB disconnect, device number 43 [ 2265.685601][T27036] usb 6-1: USB disconnect, device number 45 [ 2266.314474][T22597] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2266.346453][T22591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2266.736847][T22619] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2266.737930][T27036] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 2266.904262][T22628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5493'. [ 2266.908488][T27036] usb 7-1: Using ep0 maxpacket: 32 [ 2266.916691][T27036] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2266.922978][T27036] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2266.925071][T22628] qnx6: unable to set blocksize [ 2266.926321][T27036] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2266.930737][T27036] usb 7-1: Product: syz [ 2266.932287][T27036] usb 7-1: Manufacturer: syz [ 2266.934323][T27036] usb 7-1: SerialNumber: syz [ 2266.964492][T22634] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2266.980058][T27036] usb 7-1: config 0 descriptor?? [ 2266.986496][T22602] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2267.197078][ T5842] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2267.276172][ T4239] usb 7-1: USB disconnect, device number 42 [ 2267.392145][ T5842] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2267.396946][ T5842] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2267.401120][ T5842] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2267.405032][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.411390][T22628] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2267.417987][ T5842] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2267.638771][ T4239] usb 6-1: USB disconnect, device number 46 [ 2267.722966][T22683] syzkaller0: entered promiscuous mode [ 2267.725193][T22683] syzkaller0: entered allmulticast mode [ 2268.046097][T22695] syzkaller0: entered promiscuous mode [ 2268.048597][T22695] syzkaller0: entered allmulticast mode [ 2268.330897][T22701] netlink: 'syz.6.5498': attribute type 10 has an invalid length. [ 2268.361903][T22701] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2268.377419][T22710] syzkaller0: entered promiscuous mode [ 2268.379379][T22710] syzkaller0: entered allmulticast mode [ 2268.387142][T22701] netlink: 'syz.6.5498': attribute type 10 has an invalid length. [ 2268.421452][T22701] 8021q: adding VLAN 0 to HW filter on device team0 [ 2268.430274][T22701] bond0: (slave team0): Enslaving as an active interface with an up link [ 2268.685165][T22731] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2268.795331][T22734] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2268.978266][T22736] pim6reg: entered allmulticast mode [ 2268.981031][T22739] pim6reg: left allmulticast mode [ 2269.148889][T22745] pim6reg: entered allmulticast mode [ 2269.152898][T22745] pim6reg: left allmulticast mode [ 2269.537344][T22758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5511'. [ 2269.943489][T12465] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 2269.956124][T22838] syzkaller0: entered promiscuous mode [ 2269.958044][T22838] syzkaller0: entered allmulticast mode [ 2270.093903][T22845] pim6reg: entered allmulticast mode [ 2270.104176][T22845] pim6reg: left allmulticast mode [ 2270.114591][T12465] usb 11-1: Using ep0 maxpacket: 16 [ 2270.120091][T12465] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2270.126734][T12465] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2270.129601][T12465] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.132306][T12465] usb 11-1: Product: syz [ 2270.133892][T12465] usb 11-1: Manufacturer: syz [ 2270.136038][T12465] usb 11-1: SerialNumber: syz [ 2270.139343][T12465] usb 11-1: config 0 descriptor?? [ 2270.145588][T12465] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2270.149186][T12465] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 2270.223576][T22856] pim6reg: entered allmulticast mode [ 2270.247144][T22856] pim6reg: left allmulticast mode [ 2270.294407][T22862] syzkaller0: entered promiscuous mode [ 2270.296569][T22862] syzkaller0: entered allmulticast mode [ 2270.813919][T12465] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 2271.561302][T12465] em28xx 11-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 2271.569395][T12465] em28xx 11-1:0.0: board has no eeprom [ 2271.942957][ T42] audit: type=1326 audit(1783387693.320:13914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.1.5526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 2271.966138][ T42] audit: type=1326 audit(1783387693.320:13915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.1.5526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 2271.991617][ T42] audit: type=1326 audit(1783387693.320:13916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.1.5526" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 2272.007149][ T42] audit: type=1326 audit(1783387693.320:13917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.1.5526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 2272.032764][ T42] audit: type=1326 audit(1783387693.320:13918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.1.5526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 2272.051924][ T42] audit: type=1326 audit(1783387693.320:13919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.1.5526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 2272.052019][ T42] audit: type=1326 audit(1783387693.320:13920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.1.5526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 2272.052066][ T42] audit: type=1326 audit(1783387693.320:13921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.1.5526" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f23fec code=0x7ffc0000 [ 2272.939096][T22827] em28xx 11-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 2273.010228][T12465] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2273.018330][T12465] em28xx 11-1:0.0: dvb set to bulk mode. [ 2273.052709][T12465] usb 11-1: USB disconnect, device number 37 [ 2273.060664][T12465] em28xx 11-1:0.0: Disconnecting em28xx [ 2273.069077][T11991] em28xx 11-1:0.0: Binding DVB extension [ 2273.128853][T11991] em28xx 11-1:0.0: Registering input extension [ 2273.131648][T12465] em28xx 11-1:0.0: Closing input extension [ 2273.179397][T12465] em28xx 11-1:0.0: Freeing device [ 2273.232794][T22940] syzkaller0: entered promiscuous mode [ 2273.234835][T22940] syzkaller0: entered allmulticast mode [ 2273.730477][T22950] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2273.760322][T22950] kvm: pic: non byte read [ 2273.764409][T22950] kvm: pic: level sensitive irq not supported [ 2273.765307][T22950] kvm: pic: non byte read [ 2273.774476][T22950] kvm: pic: level sensitive irq not supported [ 2273.775282][T22950] kvm: pic: non byte read [ 2273.782631][T22950] kvm: pic: level sensitive irq not supported [ 2273.786463][T22950] kvm: pic: non byte read [ 2274.014065][T22964] syzkaller0: entered promiscuous mode [ 2274.018286][T22964] syzkaller0: entered allmulticast mode [ 2274.373353][T22984] syzkaller0: entered promiscuous mode [ 2274.375912][T22984] syzkaller0: entered allmulticast mode [ 2274.391914][T22982] syzkaller0: entered promiscuous mode [ 2274.394547][T22982] syzkaller0: entered allmulticast mode [ 2274.528167][T22995] syzkaller0: entered promiscuous mode [ 2274.531375][T22995] syzkaller0: entered allmulticast mode [ 2274.644981][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5542'. [ 2274.861029][T23015] syzkaller0: entered promiscuous mode [ 2274.863188][T23015] syzkaller0: entered allmulticast mode [ 2275.074056][T23022] syzkaller0: entered promiscuous mode [ 2275.076348][T23022] syzkaller0: entered allmulticast mode [ 2275.290770][T23038] pim6reg: entered allmulticast mode [ 2275.297252][T23038] pim6reg: left allmulticast mode [ 2275.556770][T23068] binder_alloc: 23066: binder_alloc_buf, no vma [ 2275.760701][T23065] syzkaller0: create flow: hash 1921949391 index 1 [ 2275.911703][T23079] syzkaller0: delete flow: hash 1921949391 index 1 [ 2282.728567][T23090] pim6reg: entered allmulticast mode [ 2282.730627][T23091] pim6reg: left allmulticast mode [ 2282.758041][T23116] sch_tbf: burst 1023 is lower than device lo mtu (32783) ! [ 2282.792378][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 2282.983081][T23137] syzkaller0: entered promiscuous mode [ 2282.985923][T23137] syzkaller0: entered allmulticast mode [ 2284.618586][T23167] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2284.756186][T23170] syzkaller0: entered promiscuous mode [ 2284.760747][T23170] syzkaller0: entered allmulticast mode [ 2284.930880][T23173] pim6reg: entered allmulticast mode [ 2284.935149][T23173] pim6reg: left allmulticast mode [ 2285.104486][T23175] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2285.295443][T23182] qnx6: unable to set blocksize [ 2285.614445][T12391] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 2286.142797][T12391] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2286.479250][T23206] [U]  [ 2286.840588][T12391] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2287.161556][T12391] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2287.164712][T12391] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.173780][T23182] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2287.180411][T12391] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2287.404347][T12824] usb 7-1: USB disconnect, device number 43 [ 2288.253173][T23266] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2288.322947][T23265] overlayfs: missing 'lowerdir' [ 2288.474518][T23274] tipc: Enabled bearer , priority 0 [ 2288.482500][T23274] syzkaller0: entered promiscuous mode [ 2288.485788][T23274] syzkaller0: entered allmulticast mode [ 2288.490962][T23275] qnx6: unable to set blocksize [ 2288.525929][T23274] tipc: Resetting bearer [ 2288.531630][T23272] tipc: Resetting bearer [ 2288.560761][T23272] tipc: Disabling bearer [ 2288.751567][T12824] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 2288.770166][T23291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5595'. [ 2288.967169][T12824] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2288.977885][T12824] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2288.991012][T12824] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2289.003506][T12824] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2289.227272][T23298] overlayfs: missing 'lowerdir' [ 2289.625438][T23304] qnx6: unable to set blocksize [ 2289.648611][T23275] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2289.904880][ T4239] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 2290.067405][ T4239] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2290.073122][ T4239] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2290.077212][ T4239] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2290.080597][ T4239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.087673][T23304] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2290.095041][ T4239] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2290.308450][ T4239] usb 7-1: USB disconnect, device number 44 [ 2290.458197][T12824] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 2290.764310][T12824] usb 11-1: USB disconnect, device number 38 [ 2291.389372][T23382] veth0_macvtap: left promiscuous mode [ 2291.473275][T23387] qnx6: unable to set blocksize [ 2291.498710][T12824] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 2291.712266][T12824] usb 11-1: Using ep0 maxpacket: 16 [ 2291.727108][T12824] usb 11-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2291.735011][T12824] usb 11-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2291.742131][T23382] veth0_macvtap: entered promiscuous mode [ 2291.749173][T12824] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2291.753286][T12824] usb 11-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2291.757770][T12824] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.770402][T12824] usb 11-1: config 0 descriptor?? [ 2291.785817][T27036] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2291.842532][T23404] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2291.941204][T12824] usbhid 11-1:0.0: can't add hid device: -22 [ 2291.944454][T12824] usbhid 11-1:0.0: probe with driver usbhid failed with error -22 [ 2292.214404][T27036] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2292.796893][T27036] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2292.807525][T27036] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2292.814125][T27036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.867910][T23384] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2292.875005][T27036] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2293.102580][T12824] usb 6-1: USB disconnect, device number 47 [ 2293.719932][ T5842] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 2293.880163][ T5842] usb 7-1: Using ep0 maxpacket: 8 [ 2293.884444][ T5842] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2293.888960][ T5842] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2293.893907][ T5842] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2293.898125][ T5842] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2293.902674][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.916309][ T5842] usb 7-1: config 0 descriptor?? [ 2294.786970][ T4104] usb 11-1: USB disconnect, device number 39 [ 2295.089575][ T5842] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 2295.094101][ T5842] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 2295.098791][ T5842] mcp2221 0003:04D8:00DD.0026: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2295.255516][ T5842] usb 7-1: USB disconnect, device number 45 [ 2296.278536][ T6117] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 2296.305822][ T4104] usb 13-1: new high-speed USB device number 44 using dummy_hcd [ 2296.448509][ T6117] usb 11-1: Using ep0 maxpacket: 32 [ 2296.466207][ T4104] usb 13-1: Using ep0 maxpacket: 32 [ 2296.473604][ T4104] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2296.487103][ T4104] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2296.493910][ T4104] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2296.500397][ T4104] usb 13-1: Product: syz [ 2296.502414][ T4104] usb 13-1: Manufacturer: syz [ 2296.505722][ T4104] usb 13-1: SerialNumber: syz [ 2296.514516][ T4104] usb 13-1: config 0 descriptor?? [ 2296.518594][T23533] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2296.597291][ T6117] usb 11-1: unable to get BOS descriptor or descriptor too short [ 2296.830645][T12824] usb 13-1: USB disconnect, device number 44 [ 2296.835622][ T6117] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 2296.879496][ T6117] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 2296.896273][ T6117] usb 11-1: config 14 has no interface number 0 [ 2296.903098][ T6117] usb 11-1: config 14 has no interface number 1 [ 2296.915710][ T6117] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2296.930359][ T6117] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 2296.954890][ T6117] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 2296.972888][ T6117] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 2296.987594][ T6117] usb 11-1: config 14 interface 57 has no altsetting 0 [ 2296.995088][ T6117] usb 11-1: config 14 interface 228 has no altsetting 0 [ 2297.023590][ T6117] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2297.031395][ T6117] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.039103][ T6117] usb 11-1: Product: syz [ 2297.040719][ T6117] usb 11-1: Manufacturer: syz [ 2297.043275][ T6117] usb 11-1: SerialNumber: syz [ 2297.328919][T23565] netlink: zone id is out of range [ 2297.334664][T23565] netlink: zone id is out of range [ 2297.339444][T23565] netlink: zone id is out of range [ 2297.347714][T23565] netlink: zone id is out of range [ 2297.351135][T23565] netlink: zone id is out of range [ 2297.362513][T23565] netlink: zone id is out of range [ 2297.365042][T23565] netlink: zone id is out of range [ 2297.367814][T23565] netlink: zone id is out of range [ 2297.370248][T23565] netlink: zone id is out of range [ 2297.378835][T23565] netlink: zone id is out of range [ 2299.546721][ T6117] legousbtower 11-1:14.57: interrupt endpoints not found [ 2299.573997][ T6117] legousbtower 11-1:14.228: interrupt endpoints not found [ 2299.613640][ T6117] usb 11-1: USB disconnect, device number 40 [ 2299.652846][T23605] netlink: 'syz.1.5628': attribute type 1 has an invalid length. [ 2299.674806][T23605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5628'. [ 2304.094263][T23629] net_ratelimit: 9 callbacks suppressed [ 2304.094310][T23629] netlink: zone id is out of range [ 2304.100374][T23629] netlink: zone id is out of range [ 2304.108143][T23629] netlink: zone id is out of range [ 2304.111317][T23629] netlink: zone id is out of range [ 2304.116013][T23629] netlink: zone id is out of range [ 2304.118999][T23629] netlink: zone id is out of range [ 2304.120945][T23629] netlink: zone id is out of range [ 2304.124627][T23629] netlink: zone id is out of range [ 2304.127152][T23629] netlink: zone id is out of range [ 2304.130209][T23629] netlink: zone id is out of range [ 2304.744490][T23641] [U]  [ 2304.747808][T23641] [U] K{ [ 2304.749143][T23641] [U] T 1ŠFFˊ`GJǘGO/MC [ 2304.752358][T23641] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 2304.758862][T23641] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 2304.771042][T23641] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 2304.823839][T23641] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 2304.832664][T23641] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 2304.837909][T23641] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 2304.843610][T23641] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 2305.032286][T23641] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 2305.079778][T23641] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 2305.115218][T23651] pim6reg: entered allmulticast mode [ 2305.118678][T23655] pim6reg: left allmulticast mode [ 2305.131887][T23641] [U] 22Ʃ۩X?0;3U [ 2305.155514][T23641] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 2305.193062][T23641] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 2305.196984][T23641] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 2305.204633][T23641] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 2305.210452][T23641] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 2305.215038][T23641] [U] EC [ 2305.220820][T23641] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 2305.296354][T23660] fuse: Invalid rootmode [ 2305.492791][T23640] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 2307.283974][T23673] hsr0 speed is unknown, defaulting to 1000 [ 2307.498396][T23663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5636'. [ 2308.857483][T23686] 9p: Bad value for 'timeout' [ 2309.054932][ T4104] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2309.123068][T23673] netdevsim0 speed is unknown, defaulting to 1000 [ 2309.135885][T23673] lo speed is unknown, defaulting to 1000 [ 2317.602041][T23780] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2317.651286][T23780] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2317.665356][T23780] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 2317.687931][T23780] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2317.698106][T23780] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 2317.704681][T23780] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 2317.707612][T23780] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 2317.710704][T23780] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 2317.714054][T23780] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 2317.717393][T23780] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 2317.998094][T23792] hsr0 speed is unknown, defaulting to 1000 [ 2318.139776][T23792] netdevsim0 speed is unknown, defaulting to 1000 [ 2318.149474][T23792] lo speed is unknown, defaulting to 1000 [ 2320.733426][T23860] bridge1: entered allmulticast mode [ 2320.805153][T23859] bridge1: left allmulticast mode [ 2321.321984][ T5842] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2321.482333][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 2321.489687][ T5842] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2321.500976][ T5842] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 2321.510742][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2321.513723][ T5842] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2321.522085][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.532195][ T5842] usb 6-1: config 0 descriptor?? [ 2321.542319][ T5842] usbhid 6-1:0.0: can't add hid device: -22 [ 2321.547979][ T5842] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 2321.971558][T23892] [ 2321.972448][T23892] ============================================ [ 2321.974827][T23892] WARNING: possible recursive locking detected [ 2321.977525][T23892] syzkaller #0 Tainted: G L [ 2321.980454][T23892] -------------------------------------------- [ 2321.981941][T23893] blkio.reset_stats is deprecated [ 2321.982771][T23892] syz.1.5657/23892 is trying to acquire lock: [ 2321.986756][T23892] ffffffff8fc50850 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 2321.990540][T23892] [ 2321.990540][T23892] but task is already holding lock: [ 2321.992909][T23892] ffffffff8fc50850 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 2321.996375][T23892] [ 2321.996375][T23892] other info that might help us debug this: [ 2321.999471][T23892] Possible unsafe locking scenario: [ 2321.999471][T23892] [ 2322.002208][T23892] CPU0 [ 2322.003299][T23892] ---- [ 2322.004362][T23892] lock(qp_broker_list.mutex); [ 2322.005902][T23892] lock(qp_broker_list.mutex); [ 2322.007652][T23892] [ 2322.007652][T23892] *** DEADLOCK *** [ 2322.007652][T23892] [ 2322.010644][T23892] May be due to missing lock nesting notation [ 2322.010644][T23892] [ 2322.013478][T23892] 1 lock held by syz.1.5657/23892: [ 2322.015085][T23892] #0: ffffffff8fc50850 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 2322.018368][T23892] [ 2322.018368][T23892] stack backtrace: [ 2322.020472][T23892] CPU: 0 UID: 0 PID: 23892 Comm: syz.1.5657 Tainted: G L syzkaller #0 PREEMPT(full) [ 2322.020493][T23892] Tainted: [L]=SOFTLOCKUP [ 2322.020499][T23892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2322.020508][T23892] Call Trace: [ 2322.020515][T23892] [ 2322.020523][T23892] dump_stack_lvl+0x100/0x190 [ 2322.020548][T23892] print_deadlock_bug.cold+0xbd/0xca [ 2322.020574][T23892] __lock_acquire+0x1256/0x1a40 [ 2322.020599][T23892] ? _raw_spin_unlock_irqrestore+0x52/0x80 SYZFAIL: failed to recv rpc [ 2322.020625][T23892] lock_acquire+0x1b9/0x370 [ 2322.020642][T23892] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 2322.020657][T23892] ? __pfx___might_resched+0x10/0x10 [ 2322.020677][T23892] ? kasan_save_stack+0x3f/0x50 [ 2322.020702][T23892] ? kasan_save_stack+0x30/0x50 [ 2322.020716][T23892] __mutex_lock+0x1a4/0x1bd0 [ 2322.020734][T23892] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 2322.020748][T23892] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 2322.020762][T23892] ? __fput+0x3ff/0xb50 [ 2322.020776][T23892] ? task_work_run+0x150/0x240 [ 2322.020795][T23892] ? exit_to_user_mode_loop+0x1d8/0x6f0 [ 2322.020854][T23892] ? __do_fast_syscall_32+0x701/0x970 [ 2322.020866][T23892] ? do_fast_syscall_32+0x32/0x70 [ 2322.020878][T23892] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2322.020898][T23892] ? __pfx___mutex_lock+0x10/0x10 [ 2322.020923][T23892] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 2322.020938][T23892] vmci_qp_broker_detach+0x14c/0x11e0 [ 2322.020954][T23892] ? kasan_quarantine_put+0x104/0x240 [ 2322.020966][T23892] ? lockdep_hardirqs_on+0x78/0x100 [ 2322.020984][T23892] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 2322.020997][T23892] ? ctx_free_ctx+0x4b0/0xda0 [ 2322.021012][T23892] ? ctx_free_ctx+0x4bd/0xda0 [ 2322.021026][T23892] ? kfree+0x22b/0x6c0 [ 2322.021045][T23892] ctx_free_ctx+0x517/0xda0 [ 2322.021060][T23892] ? __pfx_ctx_free_ctx+0x10/0x10 [ 2322.021076][T23892] ? find_held_lock+0x2b/0x80 [ 2322.021090][T23892] ? vmci_ctx_enqueue_datagram+0x477/0x5f0 [ 2322.021105][T23892] ? vmci_ctx_enqueue_datagram+0x477/0x5f0 [ 2322.021122][T23892] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 2322.021140][T23892] vmci_datagram_dispatch+0x3db/0xc60 [ 2322.021157][T23892] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 2322.021174][T23892] ? vmci_qp_broker_detach+0xe0f/0x11e0 [ 2322.021188][T23892] ? find_held_lock+0x2b/0x80 [ 2322.021207][T23892] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 2322.021222][T23892] qp_notify_peer+0x1a6/0x230 [ 2322.021235][T23892] ? __pfx_qp_notify_peer+0x10/0x10 [ 2322.021249][T23892] ? __pfx_vmci_ctx_qp_exists+0x10/0x10 [ 2322.021269][T23892] vmci_qp_broker_detach+0xa20/0x11e0 [ 2322.021286][T23892] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 2322.021300][T23892] ? ctx_free_ctx+0x4b0/0xda0 [ 2322.021316][T23892] ? ctx_free_ctx+0x4bd/0xda0 [ 2322.021331][T23892] ? kfree+0x22b/0x6c0 [ 2322.021350][T23892] ctx_free_ctx+0x517/0xda0 [ 2322.021367][T23892] ? __pfx_ctx_free_ctx+0x10/0x10 [ 2322.021385][T23892] ? vmci_ctx_destroy+0x13e/0x1c0 [ 2322.021401][T23892] ? vmci_ctx_destroy+0x148/0x1c0 [ 2322.021418][T23892] vmci_ctx_destroy+0x150/0x1c0 [ 2322.021434][T23892] vmci_host_close+0x115/0x1a0 [ 2322.021453][T23892] ? __pfx_vmci_host_close+0x10/0x10 [ 2322.021471][T23892] __fput+0x3ff/0xb50 [ 2322.021485][T23892] task_work_run+0x150/0x240 [ 2322.021502][T23892] ? __pfx_task_work_run+0x10/0x10 [ 2322.021520][T23892] exit_to_user_mode_loop+0x1d8/0x6f0 [ 2322.021540][T23892] ? rcu_is_watching+0x12/0xc0 [ 2322.021555][T23892] __do_fast_syscall_32+0x701/0x970 [ 2322.021568][T23892] do_fast_syscall_32+0x32/0x70 [ 2322.021580][T23892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2322.021596][T23892] RIP: 0023:0xf7f23fec [ 2322.021615][T23892] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 2322.021621][T23892] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 2322.021634][T23892] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00000000ffffffff [ 2322.021642][T23892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2322.021649][T23892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2322.021657][T23892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2322.021664][T23892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2322.021678][T23892] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)