last executing test programs: 8m30.169991836s ago: executing program 0 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x408c40, 0x80) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getdents64(r2, 0x0, 0x20000) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000000000000000000000000000000000800000000000000000000000000003000000000a00002008000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000e0000001000000000000000000000000000000000100000000000000ffffffff0000000000000000000000000000000000000001000000003c00000002000000fc0000000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000002001000000000000000000000000000000000000020000000000000003000000286a8b2700000000000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000003c00000002000000ffffffff000000000000000000000000000000000100"/500], 0x23c}}, 0x0) 8m30.158386271s ago: executing program 1 (id=868): syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38a8, 0x8, 0x0, 0x1e6}, &(0x7f0000000380)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setrlimit(0x8, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async, rerun: 32) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 8m29.862816616s ago: executing program 0 (id=870): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}]}]}, 0x1bc}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf253b0000000c009900ffffffff72000000080027000100000008002201160000000800a00006000000050019010f00000005001901060000005600cd000700ece1cc0507006e0304009e001000060000000800cd000900050008005700d803000032003300b0940200ffffffffffff080211000000ec9ebecf6d2b8ce10c00c900000004001600dd0a3a7fbed3723bf1e4a43b000041003300e0845300ffffffffffffffffffffffff08021100000099000a0085000c05640c3e01036512505050505050ffffffffffff08021100000068040400090000000008002201730100000800a1000600000008009f00000000000800a100060000000800a0000200000004006c00"], 0x114}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) socket$nl_route(0x10, 0x3, 0x0) 8m29.586264539s ago: executing program 2 (id=873): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3e, {0x0, 0x0, 0xa000003, 0x0, 0x4, 0xdbd1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x100) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) madvise(&(0x7f0000654000/0x3000)=nil, 0x3000, 0x11) 8m29.174073239s ago: executing program 2 (id=875): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003020002000203"]}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xb7) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$char_usb(r0, &(0x7f0000000000)="fa", 0x1) 8m28.614571473s ago: executing program 0 (id=878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) close_range(r0, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x70602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@delchain={0x54, 0x65, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0xffe0, 0xfff9}, {0x8, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x4}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x2, 0x26, 0x1}]}}}]}, 0x50}}, 0x0) 8m27.346090317s ago: executing program 2 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e2b}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x3, 0xffffffffffffffff}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="040100001a000100000000000000000020010000000000000000000000000001ac1e00010000000000000000000000c300000000000000000000000000000000632247f3964fb109c73b131449d70b8ea624e01358dc8f4c41a310c1df4d4ccf7d9df4ae5f96a317e8ecbd6a0b18418d02fb084f42b591dffccf36f3b5e12e57d6e8e047e23b665e314fa824d49438e0e0d85c2ff7936d42597f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0100000000000000000000000000000a000200000000000000000014000e00fc0200"/188], 0x104}}, 0x0) (async) shmctl$SHM_LOCK(0x0, 0xb) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53dedc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000400)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7fff, 0x1, 0x0, 0x0, 0x0, [{0x56c13638, 0x80000000, 0x664}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000600)={{0xa, 0x4, 0x6ef, 0xfffffbff, '\x00', 0x1}, 0x5, 0x3, 0x800, r0, 0x9, 0xd, 'syz0\x00', &(0x7f0000000280)=['.+\'+\x00', '\x00', 'GPL\x00', 'GPL\x00', '-*,\x00', '/dev/sequencer\x00', '\x00', '^)\x00', 'devlink\x00'], 0x2d}) (async, rerun: 64) shutdown(r6, 0x0) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) listen(r6, 0x1) 8m26.823600642s ago: executing program 2 (id=881): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x3, &(0x7f0000003d40)=[{0x6, 0x0, 0x4, 0x7fff0000}, {0xfff7, 0x8, 0x3, 0x2}, {0x2, 0x3, 0x8f, 0x6}]}) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000300)=""/170) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e0) gettid() pause() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r3 = syz_io_uring_setup(0xd95, &(0x7f00000003c0)={0x0, 0x7c7e, 0x10100, 0x0, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x4b85, 0x0, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 8m26.673909823s ago: executing program 0 (id=883): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f0000000000)={0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x41) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xa, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x7, 0x101, 0x4000, 0x8, 0x0, 0xffffffffffffffff, 0x2, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x3100, 0x0) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'system.', '\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x4000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 64) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x1}, 0x2) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0xfffffffffffffe1b}], 0x0, 0x4498bda7e2139f37, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x45, 0x0, 0x10, 0x1c}, {0x6, 0x7, 0x1, 0xd060}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 32) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x1, 0x0, 0xa, 0x7, 0x2, 0xa6, 0x0, 0x5, 0xa, 0xffffffffffffffff}, {0xfffffff9, 0x4004, 0x0, 0xfe, 0x2, 0xf6, 0x81, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000001}, {0xffffff01, 0x35, 0x0, 0x1, 0x4, 0x5, 0xf, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) (rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0800000000950000000000000f0000000000004399f0ff01"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 8m26.326073693s ago: executing program 0 (id=886): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x44001, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200)={0xa, 0x4e23, 0x4, @mcast2, 0x401}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="d82d54a1c7a128444efcae8aff0138b3137869a191b76062572e86b194523cf09cd6787f79ba1b05024718777b990b80d0e4e5f6f7b424e66856227a393b8f0ec3ac0525a7456f830b5ef56ea7ecabccc21d8927dca428e9fd03971211a69914b4ad05874a220b695b3d6b32ee41", 0x6e}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x240}, 0x80c4) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x7, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x6, 0x9, 0x4, 0x104, 0xffff, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x10000, 0x9, 0x1, 0x101, 0x2, 0x8001, 0x7, 0x203, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r1, 0x8028640c, 0x0) r2 = userfaultfd(0x801) poll(&(0x7f0000000000)=[{r2, 0x1040}], 0x1, 0xe2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = epoll_create1(0x80000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f00003a7000/0x3000)=nil, 0x3000, 0x1, 0x131010, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @loopback, 0x4e24, 0xfffffffd, 'none\x00', 0x30, 0x32bd, 0x9}, {@loopback, 0x4e21, 0x2, 0xfffffffe, 0x4, 0x12d5e}}, 0x44) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = accept$packet(r7, &(0x7f00000000c0), &(0x7f0000000100)=0x14) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4b, 0x0, r9, 0x0, 0x0, 0x0, 0x120, 0xf5c647790ea2b775, {0x2}}) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r10, &(0x7f0000000180)={0x80000001}) madvise(&(0x7f00005d3000/0x2000)=nil, 0x2000, 0x14) dup(r0) 8m25.538930499s ago: executing program 2 (id=887): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020013e26428ee1baf8d5c1d02030109021b000100008a0db7270904000001012920001c0509"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 8m25.076372068s ago: executing program 0 (id=889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async, rerun: 32) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x82803, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20024001}, 0x44040) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x80000}, 0x0) 8m24.793727636s ago: executing program 1 (id=890): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 8m24.369104536s ago: executing program 3 (id=891): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x175) close(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x109440, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r3 = fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 8m23.225888438s ago: executing program 1 (id=893): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xfff9, 0x3, [0x0, 0x80, 0xc28c]}, &(0x7f0000000040)=0xe) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r0, 0x3}, 0x8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x4, &(0x7f0000002140)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000002180)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r3, 0x6, &(0x7f00000021c0)="14316331a771e9e4b70f406fc8527a4fa570ff39f8a1b5af75de09e70634089301f11acb2c4005c46495b7b404f81a3d0a2806ce4cf3bab18f824b04a21fa9b596ed66a5ff1a796e67e52c8b6c6a1139b3b294d649ea0be6cfd6112e876d6e26c76fd2d177ad15fb5ae562f08b1acad726604e4204ba8b74d6f8b15150637b19e49fe0976e2cebbc656a773138317650276a3b3a8ce243b99577640e4bb4f0f264076505ad6756d1364e843ec901098f3b6b4dcccdfaf73ff3a2650b2f5cc00d5e54dcac9d49e88be281b3ed1700b99bafcda45aa0ee394ed2f60c674a53b2e4c3519e1925844a1fbc9dd011442173bfcbe9ae83b9d89c442e4b284487585d53d97cf6c308888827daac5980c732141855c7d7bf808483f5b93583bda2fec20d51c0f007521520b9f8270ec48d178471090c9b628408411ce20ffc2debcaaa261794e662a77e39058a618e3f9d7169131dbe2e643610542e8f9759ca6d6d813b2559e734c34ab4714dac2c3f80f2b32361b77fe5bf67ce90be9c6c1f592d1fa381a4da26bda4766647a5579f0d2c1e055ab7406ad3f4e604b003f15dd881af4c50af57499353a05035ba1bc608954e6006539cae4b6bdf9fc31dff8113e3dfeb15013f794e950c3f5ff6fb6c4af8c5661e72707da6429f36e94a8cd835e869360f6be0a00d1cb3b831044605db515433c459e00afd503f09f2913b59bfbf735892cefe07b5f811e9f1eeb9f2d1a9777ad282559ed11dc398e62d757d7e5991b3d6236b56ab52256cecd9734374adcdaac3827beb4ca946a0d46dc967bbbe9a2c313a57874dac3b2f0b6e5f54423e299a41e1ec4c5a668b74be335681a1e3ba7d4480efd5d620f50c3ed007221ce7bd27ab2593dfd579fa294f569432738886b4157b83ab25c52b322675517118746b29cb88722719775605e892a9f9bfb7e1b4f2c15d3f844d624deadd8e5ec7e9ba63ffe485a0349f3a702746e8a33477bb15cfd925135b61673985260d8b9bdebb054c64444334d909e33811474bcfc511aa05ff09deaa91fe04a0617bc50aac3890a14aa56d8250d6482f951392b9cb43b93a295e8e725322755777cf045ac84eaec4df9acc02ac37048b57fae84e91b6d6ceaf2ef3e8b9a8a6199a1a8c7d37f440817a7e0b45e5a0f763f941bd96269190fc629ba17096c8023da47e0e882f7e6516dfbd105feaf0697a33b3e6ac9f92031737a4f4d5e28d652118b31db4b6fb0f451b40705a5a15ae41c28da920dff50ee89c2ce5f4f632f3505e1b214af8f98fc1b0dd08b467e10e4222a23c3bc29a82beb2ea1aa6537ce06677d2476b28caff7221259350d97bf1e544a7fccc4924e0bde61849ebe810871c53866896e79a1ccd4fbee57a2af225d6f24667b8ba813daa268b01e8ab3f51888fb05578edcb6c614569ddd29196af0892bf5447b9f8893ff89439c122a10c024b5b1b27082c490cd7d7aaf951f3e69257f9e3e83ab464af0359e8610feb96fa87c344e113f8d5483e2dd43687f092f0a6724f75e66e04ac621b8b28f89dd2fca9fe1d0eeb5a55eadd6d99f1afa0bb9478fe3ecdfc87103414e7720970d3e2583325848f241965856cd57611997a739297953276456ad232b072ecc27fc70287b4050156ee89b8906387788e3b9607601ac6d6dfe4252bc918372bb4ef96ec7da177e47b645cdb64aaff448031c83b13bdf9742a25a60f8062f6fcb445e5b9c1ec66c4e48970d00550c5eec3e51160deb186faf01c9caf9850fbe4aaa65d189a27635edc23e44dc51c4da5793eb028e332886f0c59a1bd2dbf85ee2a35df808c96f1863e021df86dc599c8d9fb93c953eaef8f92e31efb2332ea330b608b780da0e395c1a34000c9f3468ec16bf223a842d2920af3befdd5521dd866348c90f46c6b7dfbad770f4e52cf9ddbff41cd670f3cb8e951a4957e486bdfec1424f833637d58071caa4bf0cee1ea1e40755f39531c741646fbe714b460bd30ba40940eac24136a6b86eb4db0bcb8d163772afbc9719c28e87f851b2c04f80f573ed4acdf284f055e4a3b0b87299715a5591120308824840e677313089fd4270d96e954c7daad2a2634eb2bc0d25157caf3277c4f9687a3d997586c3235bae4f6d962bff9d2d0f2eaab5d607659af4b8cb49f3b3d649e2076a6a3ffaf36f4f8f61f17a0b67af498d75913de5353d5c7a626c4c53493bdcf63e2dade860f84b0ea83b01cd95385772d00ec4ae117645dfe85626a53079b4f43e0ea2754f52f3901bc7bb358984a7fd55f20423e2ff069fce49423b3c0b237f436b708e38c90c07d0b4319c32a63c1159bb16c56f26431e0fab7502c466593bc805a4e4ab642f90ad76fe6fd97fd880e1c432642899645204d303a81fb99f9d96f324d683ce5b16f3573d4fae68088823d696288c5f6a7b013d24daa1ef64b8c6f7e50f3f93207e987b24546b517489d73ede0e97fb16ea1812881eaf951f294f8679c9ead94d11ecc7bdb8151ed762d9228bcf3aac4f57bfd397c85d0b2b51816757698a10d9fe2783141b221e0037c520a4efff3b625c03232d4992aa5193ee7d975d550071bad60e8b12bf877464033e82ba475d26ac24a6161a3d443a213dc983c46c5c20bbb17208aceb1e3bf3491a60675f96e6eea29a0ae3cc8a5a421938ddfc82d5a25487d712b143afeb554eca47da2ac658c54465e2e0953bd47df10bee35689fec4bc59075733c10808d3bd4a4e95d978aeec2e7fb2b98fa2f0460bf196431aefcbd1b1419ca5fef74771e8be841d0618e4f23d9c8210b2cfd22c17bcb2ce67b20acca94735cb032612f5d75f4c31dd18727c49c10562bacb5d438587a140a7af6cae368fd5a5fd63bc7980461859567ef74849c8454d1e7ad5f5b3ad54c1ecba1c3450a919a5d4d510005421fc9f2fb7b3f9f49962c9d6a6ee6bef6513eed31bc4bbaa86f9af4654cb4e2a129a4827a7d20fd4dc3847b39c50de999f1b605f5ac843240a5b3474c72e4e703d0e95f5114ebf5b525def6cd15a65d891553d69f2658d01c9562930607cfd3472e1339df5004c0d42a5bed20961982fca2b8c275c4f0f046338818fcaea47cb5ba0fbbbe7fc4a1fc45b5fcf114be9bde49f43c412796b67e1d84a030f7850664e2fc53383ecaf65d4f55d5835eb7d28f1a110adc795ef36575fad7474e46dde8412a43298930583f9737c3096e2934f26aa0374d6234aec30be9d5f42d97a87abca2ad6eccfb9df7010d13ff73c2babceae543e07ee2cbc1ec22bcda6fd125f16361ab7936a30069e53379b2062807ea414f6d137a03bab3adf17e11f436258d04e929f42bd45e42c70f30039e9c4b6c7b047dcf8c69e8aaf5d8a3529c9e3075593c62555d6c57da08f2be629df44c3e6d5b0a395f4c7f19d057fcf704ead6f269049f48eb397c0d66381ce4a9f63d7aa48323ab9a26034bf6e9d35184a95805a6fa05e911e9a7165060cc531ddc7df08a166bdc6a3136aa9920c438e46dc8fc45998b233fda30b161ea1efa8300bde46165d1f58cc6a2090e92f5c0d89d722a5934d763a1bdb4e6460b36abb53f52cc2da9ca3f755ec0ddb2d358539699fdd9dbb837b23c351ca9ee94e3f5089e56b1deee41aa1bd80fb7c150fc8866825ea30ebb56c23fa2bc83e2e75fb9fd315cf12e49ecdc26013773c69575dae153ae0cbd6f20f44b3eafcb19c99e33f63c9eafa10f6410bf0f3d5bad16e57bcb26a0ace2007c6d3410f67cffd7c040a1f7c915c177f804289266f96466401f7293366c0850467568ee8605466dc25bedb3e1282146364b84a5e1eba85a9d69a99ca7672f26fd90cc8773c6d06213986f7e3349bbbcefa26d543a4cd997ad3f4804e04ee9e97780b86fe66c798ffde9ef31e6de502c38b17c0fe6c623f4f026ca6657ec079b45220a4daacc64ebb39bda5b9a24d32baaac5491f3f86e6f07d55021f51cdbd9584a04274b0683afd47d02327847de18096f48e2b33a2e9ed5db8a0f0339be3216806512255f1d96e44b40491178b41997c0113308228eca3e9e00db299e2b7173760c8e30debb999ed404165608acf4bc9328ea01abb4efcdcbcb9eb74b424e6e210c5d063e68b116594e85e38b9235f0eb4fffd2d2afbcb22011d7f92c776ce13eb738fc4c3cee1846377a8d87bb7573b07923a223f6b48fc6920340e6115b4a622fe2f8a8ead85e3c05e4f9227bacf67a0ab53269af73c4b0369fe39c861e123d0ec52e333f880a4b3394435d99e422c6cd2779b6c46686f2c4b6344fd2ff6523eaf81d5d0e40d99a1d07d0fc6f2b46df480d9991b6484d48352261311ee904cc960bb854592ab215b1ce227f3337b5b27b4ac1e42757d8b8dadb3ecdd1594b393979a415244d9958dc47f364af8037a347072b33f20357cce8b2637abd9b7d397dd6195e3db575e3dd63a74737e5a0e8d4cd5bf3b213ed357df1f031b0e4a6e8c84593e03098e4c66a2240863983e889f91c14c79f55497ceb9d28f246e8f8209e0c83c5ca0f66af616ec917766449173ffeacc2e1a2c8f9a9d5774ae6dc69beff28eebbed94e875f320a2e1e5756bf9715d3e95cfd0542952a691eb32e80a2a8af12232416fb466b80fb5a5048e223adf75be92998f977cee69f04bbde0599ba5533cb02486c274b6a5de6596193ae9c9dcd3b5a79baa7336c46f00235ccc1366bbd46a03c9e0bcb6787c2cee0e9b7220c04881fc066a0a2a921d0c68bab87e1251a74b641531b7fab1b98eea1a1ac749204fd80a146463cf2423fafff4a231f0f1d3802fa5af322872e746966847d1db71de77bd359ac615c2707320903fa5101fd3df938680ef67f639ce59ca53ffcb7b7fc28f16647ed56d6bfeb850045dac2e7b226e73a089b5fd15ed0beea91963962f128008ad678a8afce488e9da459570cd685c8086dd1fffde244fa36f8298f0c4a3abab50b414aa7be53053a67856778ba756d62992af4632242123d35a2a5dd3d1eef39fc64ea12c2d11f5bcd963cbc1fb80b1c5def76be1abc121a0d2bf57772374a45d5477f79bffb0d07b6adcc275ce9e05d7a0683fe6daad19d6c6c8992573edc88a175caa04f24af03baa375f038819f6419d9e6dffa6f08b7185a59c187bb1fb17f66e3f018c7e4f3e05bf567d4e18e3ae816b9020831646c3fa3f8a8389c87cede46499a4063f9b24dded93d627a27f5b4c944841b3bae652aaffd203fb277c3f5bca96b41b2794f39d797f809400187f40b6c8c20b8eeff35b54c7626d35c640894c2977c378892826ff7ce46cd7f5ec7adb31d234da39c2af12e1647f7c39b5f4cf10319f18e68c37c83ce1053c9071bad65530a57928ed9f946b4f1afc9053053fc838890d19546156be13add155a3013507c892915b0cfcc8109ea39e59bb7fa47eb6d8882ad09ffbae0364b85d2a50852ae971752cd9ecb80b68459ee22f2a56fa1b19c2b74451c7facb76e3922f3217025f19807d3b0b2ff5e1ad17b1732ff78eb9ad975a1726d8d25c3d02746fceac4c9497a5b93907d2930c24e9c366e545daa053dfd25a3ab613f48753a929a45cd0b69204db0d55ae3625c23e0c7975eea154aa6e7354750c972d781069243a0d7415ae35425c3cbdc9479aa8648c3e64dab3c1f02121f44d38578212d4f868fc23700e2bc06b0398cde4a1a262cc023d5ba4f2c509dee2cee6c10805fd291dfb08de8b596ce657a347ff601ba10f47183253f9057d7689ce1f8dad9e9d1a090245a54467b632b7f785d0a3a67ecd3d8c21fc418c6ba0a27d9588fb342526cb7f8292f67") sync_file_range(r3, 0x554, 0x1, 0x2) pipe2$9p(&(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RFSYNC(r5, &(0x7f0000003200)={0x7, 0x33, 0x431}, 0x7) ioctl$KDADDIO(r1, 0x4b34, 0xfffffffffffffffd) listen(r3, 0x1) r6 = syz_open_dev$MSR(&(0x7f0000003240), 0x1, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000003280)) fcntl$setsig(r5, 0xa, 0x33) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000032c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000003540)={0xa, 0x4, {0x9, @struct={0x4, 0x3}, 0x0, 0x0, 0x3, 0x4b36, 0x100, 0x7000000, 0x83, @usage=0x3, 0x6, 0x9, [0x1, 0x8, 0x2, 0x8000000000000000, 0x4da, 0xffffffff]}, {0x4c3, @usage=0x9, 0x0, 0x2, 0xa, 0xffffffff, 0x1ca, 0x10000, 0x2, @struct={0x1, 0x6}, 0xfffffffc, 0x4, [0x81, 0x8000000000000000, 0x2, 0x6, 0x7, 0x10]}, {0x5, @struct={0x710c, 0x74a1f5b1}, 0x0, 0x7, 0x1, 0x1, 0x6160, 0x5, 0x5, @usage=0xffffffffffffffbd, 0x3, 0x1, [0x7, 0x8000, 0xfff, 0x2, 0x7, 0x9]}, {0x5, 0xd3a, 0x6c1}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000003940)={{r1}, r7, 0x0, @inherit={0x48, &(0x7f00000034c0)={0x0, 0x0, 0x8, 0x8, {0x10, 0x7ff, 0x21, 0x1c4, 0x7ca9}}}, @devid=r8}) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000004940)={0x8, 0x7}) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000004980)=0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000004a00)={0x1, 0x0, &(0x7f00000049c0)=[r3, r4, 0xffffffffffffffff, r6]}, 0x4) fcntl$setlease(r1, 0x400, 0x1) r9 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r9, &(0x7f0000004a40)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r10, 0x0, 0x3, &(0x7f0000004a80)=0x1, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000004ac0)=0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000004b00), &(0x7f0000004b40)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005300)=@bpf_tracing={0x1a, 0x13, &(0x7f0000004bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xa4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @exit, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}]}, &(0x7f0000004c80)='syzkaller\x00', 0x5, 0xf6, &(0x7f0000004cc0)=""/246, 0x41100, 0x18, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000004dc0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000004e00)={0x1, 0x10, 0xffffffa1, 0x7}, 0x10, 0x20284, 0xffffffffffffffff, 0x0, &(0x7f00000052c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) 8m23.179336154s ago: executing program 3 (id=894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf250900000018000180140002007465616d5f736c6176655f30"], 0x2c}}, 0xc040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000840)={0x2ff, [0x8], 0x2}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) setrlimit(0xb, &(0x7f0000000000)={0x9, 0xaf5}) 8m22.885430683s ago: executing program 1 (id=895): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) syz_open_dev$evdev(&(0x7f00000000c0), 0x1ff, 0x8640) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x2c9ab000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8911, &(0x7f0000000000)) fadvise64(r2, 0x2, 0x106, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x1}, 0x7) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) write$FUSE_STATFS(r4, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x1000) 8m22.734070731s ago: executing program 3 (id=896): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='user\x00', &(0x7f0000000140)='\x00', 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000440)=@mmap={0x2, 0xb, 0x4, 0x1, 0x4, {}, {0x1, 0x2, 0x96, 0x8, 0xd, 0x3a, "1fe1fceb"}, 0x7, 0x1, {}, 0x3}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='user\x00', &(0x7f0000000040), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="010000000003ffdbdf250100000008000100", @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="4400e72d40000100240001007072696f72697479000000000000000000000000000080000000000000000000050003000e", @ANYRES8=r2], 0x60}, 0x1, 0xf000, 0x0, 0x20000000}, 0x0) 8m22.511016007s ago: executing program 1 (id=897): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0xee00, 0xee00, 0xee01) fsmount(0xffffffffffffffff, 0x1, 0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x62c21a4ade68aba1, 0x0, 0x0, {{}, {@val={0x8, 0x5, 0x24}, @val={0x8}, @void}}}, 0x24}}, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x47) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r4}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000000), 0x0}, 0x20) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2) 8m22.500547661s ago: executing program 3 (id=898): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x641}}, './file0\x00'}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000140)={0x7c4, "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"}) connect$l2tp6(r0, &(0x7f0000000940)={0xa, 0x0, 0x3ff, @loopback, 0xd, 0x2}, 0x20) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000980)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000009c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000a00)='net/igmp6\x00') sendto$unix(r4, &(0x7f0000000a40)="5844302637b3be59970a68e4c603efa0dcc12a72bf55fd13df98c235b3d18cbfcfdd261287b1bfe032080cbdde7a45778ffe6db856f81366ca5385c7e72973ea20221f8e131e2c9ad1865e9b36570b7cbc7727c19408fa124957de165672daf12a0a5ce1e754b9df0049be88d3e5c6d73ef4c5e6cc573a8474c0", 0x7a, 0x40000, &(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) accept4$tipc(r0, &(0x7f0000000b40)=@id, &(0x7f0000000b80)=0x10, 0x0) setns(0xffffffffffffffff, 0x8000000) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="119848e4cabbb85d058eca64e7077b79753a7605cd60855232b14bb8e63416d70aab216fb03326ce017b8da8a16ac1cca46e95237f67e6db851e5add3d37e22568c44cb7910846954974facb2684a1c87ca96d8c6f6dd2dbb9d6e55cf3211b503f8c6d0cd392d270977c719178784ea79bce64363cf801c2d41b0bf7d13326825f862a388616ba751a9f266514a5eabd39e8b6368173b073e2436412c0fffc23e81c3dbb05aa0009568ffafd5898ca0b23ae9dfd788887f1382ae1e8d62e2c482dd21f2c2fcc8617a4e1c4af4509aadb", 0xd0}, {&(0x7f0000000cc0)="83e37edfbc108e4d9bf8bda8ff8ad734182fd4f1118aaf0414627a180f7b58f5dfcf344b82eda6874eead167ecd2d40474e8d0f4", 0x34}, {&(0x7f0000000d00)="ecdbd18f6b4862b0f1d94b9d14b01dad01d1c058f3fc6d6227d320366c6b2d71450903cb43ef99fe86626abd30fad5d40edc78ae1073676f1a6847d49e4755adfb6dd130f2cfc0dfc60eeb7c423e7d4d7dca766c327aa67f22a9d682be39023792d79831364ca8bd887aa72f6b68d8904599985f51c677372caf65a6af7863f78ea7b7e81d0779efd15f8975cd39b09d18e5e5abda7e", 0x96}], 0x3, &(0x7f0000000e00)="7ab19ae826a19dfb1c28e4c327d8", 0xe, 0x4001000}, 0x801) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r4) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000ec0)=0xfff) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000f00)) fcntl$setflags(r0, 0x2, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f0000001000)=0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x64, &(0x7f0000001040)=0x4200, 0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000001080)={0x8, {{0xa, 0x4e22, 0x2, @loopback, 0x5}}}, 0x88) syz_open_dev$dri(&(0x7f0000001140), 0x72, 0x50002) inotify_add_watch(r7, &(0x7f0000001180)='./file0/file0\x00', 0x2000d80) mount$fuse(0x0, &(0x7f00000011c0)='./file0/file0\x00', &(0x7f0000001200), 0x84000, &(0x7f0000001240)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x100000001}}], [{@subj_user}]}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000001300)={0x1, 0x3, 0x40, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000001340)={r8}) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001380)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x1000, 0x9, 0x690, 0x914, 0x7, 0xff}, {0x4a28, 0x24e7, 0xffffffffffffff58, 0x2, 0xc5e, 0x4}], ['\x00', '\x00', '\x00']}) 8m22.284193246s ago: executing program 2 (id=899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) 8m22.04198326s ago: executing program 3 (id=900): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={0x38, r5, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac01, 0xfac0c, 0xfac00]}]]}, 0x38}}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x75a}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x2) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={0x38, r5, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac01, 0xfac0c, 0xfac00]}]]}, 0x38}}, 0x0) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x75a}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x2) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 8m21.862513706s ago: executing program 1 (id=902): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x3, 0x7, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x80, 0x2, 0x9}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x110, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8m21.149982195s ago: executing program 3 (id=903): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x14, 0x601, 0x70bd27, 0x25dfdbfb, {0x29, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xfef2}) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2002, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0xffffffff}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0xfffc, @empty}}, {{0x2, 0x4e23, @empty}}]}, 0x190) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd27, 0x25dfdbff, {0x80, 0x14, 0x14, 0xa5, 0xff, 0x0, 0xc8, 0xa, 0x1b00}, ["", "", ""]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25050000004800018008000300ac1e0001080006001200000014000400fc020000000000000000000000000000060005004e21040008000700", @ANYRES32=0x0, @ANYBLOB="060005004e2000000600010000000000080002000300000028000180050002005a00000014000400ff020000000000000000000000000001080003000000000034000180060001000200000008000300ffffffff060005004e210000060005004e240000080006001000000005000200040000001c00068008000600050000000500020007000000080006001000000005000500010000000800030007000000"], 0xec}, 0x1, 0x0, 0x0, 0x200400c1}, 0x200400c0) 8m7.078066012s ago: executing program 32 (id=889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async, rerun: 32) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x82803, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20024001}, 0x44040) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x80000}, 0x0) 8m5.41575049s ago: executing program 33 (id=899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) 8m1.414414509s ago: executing program 34 (id=902): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x3, 0x7, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x80, 0x2, 0x9}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x110, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m59.066950238s ago: executing program 35 (id=903): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x14, 0x601, 0x70bd27, 0x25dfdbfb, {0x29, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xfef2}) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2002, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0xffffffff}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0xfffc, @empty}}, {{0x2, 0x4e23, @empty}}]}, 0x190) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd27, 0x25dfdbff, {0x80, 0x14, 0x14, 0xa5, 0xff, 0x0, 0xc8, 0xa, 0x1b00}, ["", "", ""]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25050000004800018008000300ac1e0001080006001200000014000400fc020000000000000000000000000000060005004e21040008000700", @ANYRES32=0x0, @ANYBLOB="060005004e2000000600010000000000080002000300000028000180050002005a00000014000400ff020000000000000000000000000001080003000000000034000180060001000200000008000300ffffffff060005004e210000060005004e240000080006001000000005000200040000001c00068008000600050000000500020007000000080006001000000005000500010000000800030007000000"], 0xec}, 0x1, 0x0, 0x0, 0x200400c1}, 0x200400c0) 1m18.434606293s ago: executing program 7 (id=2092): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x32, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x6}, @code={0xa, 0x5d, {"410f017800c482fd3453790f01cf660f3a22b7614c00005a48b8b2240000000000000f23d00f21f835300000020f23f866b8d3000f00d88f2878c1500f056744f88f4978e3218f69d89a6800"}}, @wrmsr={0x1e, 0x20, {0x8ff, 0x2ca}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x14, 0x18, {0x437, 0xaa35}}, @code={0xa, 0x62, {"660f38813666400f231f4c0fc719c4a1fa7ec966baa10066ed2e439cf30fc7b7c78a0000b9800000c00f3235008000000f30c744240000000000c7442402d2d5eb43c7442406000000000f011c2467f398"}}, @rdmsr={0x32, 0x18, {0xb4c}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x14, 0x18, {0x3, 0x3}}, @wrmsr={0x1e, 0x20, {0x24e, 0x100}}, @code={0xa, 0x71, {"3e0f01c9c42189e53248b8bf4fffffffffffff0f23c80f21f8350800f0000f23f80f060f01c3c4814df647a048b800000000010000000f23d80f21f835000000900f23f8b9f2030000b825d31b85ba000000000f3044d9eb440fc72d32690000"}}, @wr_crn={0x46, 0x20, {0x4, 0xfff}}, @rdmsr={0x32, 0x18, {0xb89}}, @cpuid={0x14, 0x18, {0x6, 0x7}}, @rdmsr={0x32, 0x18, {0x897}}, @wrmsr={0x1e, 0x20, {0x40000432, 0xffffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x232, 0x9}}, @rdmsr={0x32, 0x18, {0xbef}}, @rdmsr={0x32, 0x18, {0xb2e}}, @wr_crn={0x46, 0x20, {0x8, 0x2}}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @uexit={0x0, 0x18}, @rdmsr={0x32, 0x18, {0xaf3}}], 0x348}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 1m16.518157536s ago: executing program 7 (id=2097): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0) 1m14.057259027s ago: executing program 7 (id=2112): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m11.784994055s ago: executing program 7 (id=2124): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002140)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0) write$binfmt_elf64(r1, 0x0, 0x4f2) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='\\\\\xe9\x838\x9d<\f\x91\a\xd4A\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeYbg\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\\\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00D}\xa6\xcfa\xba-\x00$\x88HSL\x12D\xd46\x17\xd0\xb3\x94\b\xd8r\x03&\xe4\x19\xc0\xff\x15 \xb7?W\x16\xd6FZ\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000014e2fc203c419b81c0a701020301090244000100000000090400000302060000052406000005240000000d240f", @ANYRES64], 0x0) 1m10.097342033s ago: executing program 7 (id=2128): accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x180000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r0 = getpid() (async, rerun: 64) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r3 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000600)={[&(0x7f0000000280)='$`-\x00', &(0x7f0000000340)='!:\x00', &(0x7f0000000380)='U-\x00', &(0x7f00000003c0)=',(,\\%\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='^-.*\x00', &(0x7f0000000480)='%\\\x00', &(0x7f0000000580)='GPL\x00', &(0x7f00000005c0)=',*[\\/&)\x00']}, &(0x7f00000006c0)={[&(0x7f0000000680)='/dev/rtc0\x00']}, 0x1000) (async) write$bt_hci(0xffffffffffffffff, 0x0, 0x138) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e21000008000740000000"], 0x1e8}}, 0x0) 1m9.825781107s ago: executing program 7 (id=2129): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4f27, 0x5, 0xfffd, 0x0, 0x66, 0xcc7, 0x0, 0x7, 0xa, 0x100, 0x81, 0x1, 0x9, 0x4, 0x2, 0x101, 0x1, 0x1a449, 0x3, 0x40020003, 0x2089, 0x2, 0xd24, 0x20001e58, 0x7ffc, 0xe69, 0x3c, 0x1, 0x6, 0x2]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000300)='batadv0\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) close_range(r4, r4, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r2, @ANYRES8, @ANYRES8, @ANYRESDEC=r3, @ANYRESHEX, @ANYRES64=r2], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='neigh_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff892f00004000633277fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="685b954b9b4a9fe77997e40fa8e5344424ee956b9ff7a461733218f481292fc94af1e389af486ae8ccb24fe885c9a14837cd3ca76fe63fbf55695e50ab01a5bd63d25ce59519869c33d3f4847608bc8366216337e2a7c7591e2b826f039b87a3a63d44aec95dd8ab7a60f2d1262dbccbeef1ac3a2c11ea39cbfdd517d229d29d7d341b868aee14ddf1584c391321c8c7f5d3ab1c641d73283c8dc0c9670a7e5d649439313ee9f3cd01d0b956fc78c7de14c12a57128e90d88e33f1e15ec373c2409f794cb76925c22e53a99db9a73196a91aa59bf7a3a3bfe7351000"/233, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmod(0xffffffffffffffff, 0x104) r7 = syz_io_uring_setup(0x40e5, &(0x7f0000000400)={0x0, 0xec25, 0x8, 0x2, 0x40004333, 0x0, r1}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x2f, 0x60, 0x9, 0x80000000, 0x0, @mcast1, @remote, 0x8000, 0x40, 0x10, 0x1}}) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=@delqdisc={0x2c, 0x25, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0x10}, {0x1, 0xfff1}, {0x7, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xedf4}]}, 0x2c}}, 0x20008005) io_uring_enter(r7, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 1m9.449803252s ago: executing program 36 (id=2129): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4f27, 0x5, 0xfffd, 0x0, 0x66, 0xcc7, 0x0, 0x7, 0xa, 0x100, 0x81, 0x1, 0x9, 0x4, 0x2, 0x101, 0x1, 0x1a449, 0x3, 0x40020003, 0x2089, 0x2, 0xd24, 0x20001e58, 0x7ffc, 0xe69, 0x3c, 0x1, 0x6, 0x2]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000300)='batadv0\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) close_range(r4, r4, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r2, @ANYRES8, @ANYRES8, @ANYRESDEC=r3, @ANYRESHEX, @ANYRES64=r2], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='neigh_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9bb759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be9b0220836729028b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb3596b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb6ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b784d392645d013d1424c6e7f141f67ef620df8a8bac03489bf70423fa9f2c79c41d5b6496ae17718b5044c5cadb43264b290ebfcd9d5236d0b14e280fd3fcbb2fa330dcc58f44ed0b12c9299e74ea56ffefb003034230e20886f502e6df00aa138e9c8761d107bdea8d57b64345f91e055c6f52356aec1ce68e612e94224407bcf7b1df9f2aec27d44b0b9a944d16236"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="685b954b9b4a9fe77997e40fa8e5344424ee956b9ff7a461733218f481292fc94af1e389af486ae8ccb24fe885c9a14837cd3ca76fe63fbf55695e50ab01a5bd63d25ce59519869c33d3f4847608bc8366216337e2a7c7591e2b826f039b87a3a63d44aec95dd8ab7a60f2d1262dbccbeef1ac3a2c11ea39cbfdd517d229d29d7d341b868aee14ddf1584c391321c8c7f5d3ab1c641d73283c8dc0c9670a7e5d649439313ee9f3cd01d0b956fc78c7de14c12a57128e90d88e33f1e15ec373c2409f794cb76925c22e53a99db9a73196a91aa59bf7a3a3bfe7351000"/233, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmod(0xffffffffffffffff, 0x104) r7 = syz_io_uring_setup(0x40e5, &(0x7f0000000400)={0x0, 0xec25, 0x8, 0x2, 0x40004333, 0x0, r1}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x2f, 0x60, 0x9, 0x80000000, 0x0, @mcast1, @remote, 0x8000, 0x40, 0x10, 0x1}}) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=@delqdisc={0x2c, 0x25, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0x10}, {0x1, 0xfff1}, {0x7, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xedf4}]}, 0x2c}}, 0x20008005) io_uring_enter(r7, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 13.069720669s ago: executing program 4 (id=2354): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) (async, rerun: 64) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) (async, rerun: 64) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec0102030109021b00019f05c0050904c30501ff000003090501"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 11.494061706s ago: executing program 8 (id=2363): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x10800, 0x27) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 10.782048346s ago: executing program 5 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYRES16=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioprio_get$pid(0x1, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x30, 0x20, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) sendmsg$NL80211_CMD_JOIN_OCB(r9, 0x0, 0x20000000) unshare(0x62040200) 10.702034465s ago: executing program 8 (id=2366): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800, 0x0, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @pix={0x6, 0x1, 0x32314d56, 0x7, 0x2, 0x0, 0xb, 0x0, 0x0, 0x4, 0x2, 0x4}}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@multiplanar_overlay={0x1, 0x5, 0x4, 0xe000, 0xb02, {0x0, 0xea60}, {0x2, 0x2, 0x7, 0x60, 0x0, 0x4a, "eb2a3432"}, 0x10, 0x3, {&(0x7f0000000180)=[{0x800, 0x9, {0x8000}, 0x10000}, {0x0, 0x6e, {0x8001}, 0x240a}]}, 0xb, 0x0, r1}) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RWRITE(r2, &(0x7f0000000440)={0xb, 0x77, 0x1, 0x1}, 0xb) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) write$FUSE_STATX(r3, &(0x7f0000000040)={0x130, 0x0, 0x0, {0xfff, 0x1, 0x0, '\x00', {0x100, 0x1, 0x100, 0xf, 0xee00, 0x0, 0x2000, '\x00', 0x0, 0xb8, 0x6, 0xac, {0x6, 0x56}, {0x8, 0xffff}, {0xdb, 0xfffffffc}, {0xfffffffffffff801, 0x9}, 0x4, 0x6, 0x5, 0x5}}}, 0x130) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) (async) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @pix={0x6, 0x1, 0x32314d56, 0x7, 0x2, 0x0, 0xb, 0x0, 0x0, 0x4, 0x2, 0x4}}) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@multiplanar_overlay={0x1, 0x5, 0x4, 0xe000, 0xb02, {0x0, 0xea60}, {0x2, 0x2, 0x7, 0x60, 0x0, 0x4a, "eb2a3432"}, 0x10, 0x3, {&(0x7f0000000180)=[{0x800, 0x9, {0x8000}, 0x10000}, {0x0, 0x6e, {0x8001}, 0x240a}]}, 0xb, 0x0, r1}) (async) pipe2$9p(&(0x7f0000000400), 0x880) (async) write$P9_RWRITE(r2, &(0x7f0000000440)={0xb, 0x77, 0x1, 0x1}, 0xb) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) fcntl$setlease(r3, 0x400, 0x1) (async) fcntl$setlease(r3, 0x400, 0x0) (async) write$FUSE_STATX(r3, &(0x7f0000000040)={0x130, 0x0, 0x0, {0xfff, 0x1, 0x0, '\x00', {0x100, 0x1, 0x100, 0xf, 0xee00, 0x0, 0x2000, '\x00', 0x0, 0xb8, 0x6, 0xac, {0x6, 0x56}, {0x8, 0xffff}, {0xdb, 0xfffffffc}, {0xfffffffffffff801, 0x9}, 0x4, 0x6, 0x5, 0x5}}}, 0x130) (async) 9.358198683s ago: executing program 8 (id=2369): r0 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r0, &(0x7f00000000c0)={0x23, 0x7, 0x4, 0x7}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x12, "518aba4d000000000000000000000000002000"}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x3, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) 9.162899795s ago: executing program 4 (id=2371): r0 = socket(0x10, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r2 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x9000001c}) epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000100)=""/21, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001900010000000000000000001d"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x804) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) 8.899081644s ago: executing program 5 (id=2373): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {}, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}]}]}, 0x17c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) socket$nl_route(0x10, 0x3, 0x0) 7.564885155s ago: executing program 5 (id=2374): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r1 = semget$private(0x0, 0x207, 0x0) semtimedop(r1, &(0x7f00000002c0)=[{0x0, 0xff78}], 0x1, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendmmsg(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) 6.653954459s ago: executing program 9 (id=2376): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120108006095fb40b91f010460a0010203010902120001000000040904"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r7, 0x0) ioctl$TCSETS(r6, 0x89f2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0xf5d9, 0x7}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r8, 0xda4}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r2, 0x3516, 0x483, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) 6.495432145s ago: executing program 8 (id=2378): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a00"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff"], 0x3}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 6.250219478s ago: executing program 5 (id=2379): getpeername(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=0x0], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) init_module(&(0x7f0000000500)=ANY=[@ANYBLOB="7f454c46022c0704090000000000000001003e000900000083000000000000004000000000000000ba0300000000000007000000030038000100010403000700000000600300000041f8000000000000fbffffffbfffffff7f0000000000000008000000000000000300000000000000c50400000000000024eb4eac75746856bf6ec924a5ac0ba7e99da40b2a32fad8121ba43831a44f5be7e6b2222dfb566ebd2fda9b221a03868ba8dbb302ea5ff26a5d4ff259a39680692571e15348f81ad7b3ecdf600053663bceee65fecfdcbc9a40351e6e5b18d7"], 0x78, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004bc0)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r7}}) newfstatat(0xffffffffffffff9c, &(0x7f0000004cc0)='./file0\x00', &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lstat(&(0x7f0000004d80)='./file0\x00', &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f00000000c0)='./file0\x00', 0xff, 0x10, &(0x7f0000004f80)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r11, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r15 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r15, r13, r14) write$FUSE_INIT(r6, &(0x7f00000059c0)={0x50, 0x24, r12, {0x7, 0x2b, 0x7, 0x400, 0x10, 0xc1, 0x1ff, 0x6, 0x0, 0x0, 0x1, 0x7}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000880)="91679a48209b3e34a808d22ff1c6e51641bcfe6c49689a528dabc41461a54152d3fbe16b885b215a2887f2a8586c60210668e31036d41087d5e49fba73189742bce4007a61bf1a6916885d6c75aa98e82145b04e577edd5e54804cd00f76f30f8d299bbfb561d834fe938e7f4ff0d4e834ec52f37e7b702a822310a0eb120cbee5627f507a9f0b4e1bc678735931533bcdeed828e51c013637327539965d2b5a0e35555acf0a9fda2dc30f5868b85c1d02fb690a87ae7703777d9b11272e4877e7a9d96a274465ffa0ae1529f195b2dac76ed4a53b2656dc5dd76ef683b1e33bb70127017073b3e9bb3a254eaa23943dc6739675cab3ff1152550e87fabf83c102edc8700b505403e4e1afa898cc77f81cd99001d82ac6c24ba5aeda9099c3fa6ad38c2ad907e7fb560ab8a2cc2480b3baab89e5074798c0938d61080d1653af7f3873b892d06afc9d7f72522b58ba535b6b183437d472f021aa96edb263c0141baf2b52745709319d4dce0a6be3c0e1056b5fe32adbf3dc0df722af8b6dbd0582d94815be81160b466f800637e9b08ee0401353c5d3d11cdf0a9de197516a3e93c31ab6ea5f12be84e3343b34376dc0f9fd0e2d3d93260af251a099e0cc8fceeec1bf1f89d957a480ec76c0c666e1c15157f17ca92d34dee7d7be426dc0682237093cffa2b2f67f75d28db205997814662373b31d42c84bd165df9fa3f46e36c6d0d4bb7bfc56ae95f44fa6c4070d9d9b4390e5e52aa3c5445f425e0c568acf5b3881748224c0f03694b4f8cd8da0ae5e4f32d7e3bac3c8642bde7cc9d6f961beb3204c073a96a53f62b593adc0c276aa450d0bb63bb9b00cb990078f30094cbbf6b438d075091bf8f3da87b4987a01d01a1c74bb0eaa96dd626230b0ac3694dce6d7e73e4b351c64009f7b1beb8fc46e65e97eeacf08ebefe52af31fce2c6c73e0ba7513df3ce7a43d76138c303a8b8443117234c7bd673ed0b343b22847fbea94bdc48e16c8249e81d0ef8ab4b5c3ba40b43d9afa03d9c8918d62d3d325c624d0a76c1bb57c4fa55f4a1774c1fb36100f32221ca3e92db2ea0b230f30f48749bb7e42bdbd1df50ee1be4858ff11703230da5b6af3ffcd2b310576d50d7ef54674adb7294b2944745a8833f3be31523e30ddbc9ad8011ec7a48b38aab1c957af8650a34b96a47f02897a889f5e14c0d45528ea00074be8fb4eeab0533182c46472b6195c0b3e9d92bc6228d4062825254bf78c63963854c1a7ce6a217792e4d55c44f57ca30a00a195042f55315ff03f65ccde2fd60cc9aac508ad926e9a0efce11e7c4f54cba66b6138554bd92287d88b14f14a86d05e923b2a28764c44553baf9686c93df95bb50cdb1f2772094c664977e89f82f3d61bc1305c5d48ba379c035673beb1064a484898c44b8462050638246c40ecd15b594241e269deff8ef92ac51d812e616d11e626405a7df1ed8557e9bbd6e4c70f46af7b9f14e7ce0032f14f6434c19780baa2f2ccddb6cfcf4c38f157e55d2a101c329df5f45ce0695b7a307f6f915876f0545790d122c5307a233a6ee514e276e5e2291d7c0e94db90a910a4e656b5e1dd4af4aeb761ce1e07f4589c4300d183fcd41b6f7e5fd6845ea6c079b124866ee8759f9cf8c125f033073428b0406b6e2c8012cd064e921ea35fb2d319c57c4b2c5f59b66e54e445530aedd5b70905d85ffb69c7855526dd7d8cc4e46753a1c8526cc2dec1f04e14705724519474d3d6bd183d8bcc5d07e6323e31b534d59e57d6bb3c4c48ec0c289d86824042c79cf630723cb79377f0d5e5c0ad374c7dd47699d055cd12a36983d20a9cfae53e969f3ec42ad868a278dc82421b77d19f086691179f0654c9ab8841e72eea5e389b60114804c5a0027df3a0f4a50c0c61adcf70664a11b7ef92f1798e9c4c2358be0a61fc7866c1c5aa0eebf866f82b020af058a32a811d8e7fc70b6b047a97e624e112e3c0cabc35561593b5ab82e76d4545de85070f2eb0b114b53b635b52b3424e1374ad494dc218d57784ab80bf55bf6df8a608b22c1b0e6673cc4ab2db65ae779a160fade8f01948b80a234ae1f5a69795c2233dceae7a4b297519277ba0a7636f20d7e45653d52371b44da0f49f74746cc24792bc2c4e474bff1c608c409e481ddf68cebae2fa090abc02d2950d6d085768c88791b6ffc961f9b2f7be1cdc66b1c3f9cc1956f9a43368906637de9a4bac19e4524b72eedf25fa2bbafac5762427c274fc4e0e01488c975aec9b6583e4a9a90d504a0308832bc560e5f9debd0711b148b3efb67e8c1c3fab1d7b84c6cff1873dd2e4b2b32f66d4b43ddcf31251a0d4433e68eb8fb1b85bcf393c2f66df8304b09e808b05a34d840c90e0117d61787b7bfb6b0f190d8fe5bbd2ecaa2932a26a047f6c13f293f8b1f29194a1cba44f21c485c0c0f69f0f8470310990468cc28ec5c70eb70f213c10a6674bb379a36bb031a29ca433d9f2eaefcb4c010f90d90fbdd0a57c44082ba6ddfee05f0da1f47e904ee14e4af1a6fdd33626098ccaa87796d6239f284e13f892b9db9be6cc03c1304ddcb7937d5626de1a4a5fe52ed374a1babd686b69fc57ba25db0ab55863e9a5b0b05258211d56b05f90991c4de0630ebce85b379ece0ed89cb4385bb356e560a0c73ad8ed44d8fcad63cd5556d7677e5b57593a5196b939915c112304941c60a5745c8f3672824c86dce55aa4693fda97081474d098e7462e72d790782788ca50a0fd7ea698f3911af28de0eec8c38c32ebfe00929b2b31de2babb58b2f1ad1c5451621de8c5eaa1e949e92244879a2e1144087010a14ff08172d715970825981fd65cca2d6e8938dd490f9572873bf60524eb9e8155545417e8e50220486580a93be51bc8dd7269c53a0cd0648fd31bc69efb5bebef1b0ae9cd48126e1b8247ec73ce8e059374373af82327b8f27fffefc5702bdf2704e59baf2c3554fab58f70e928cdc1d4af7aec4507f211aaa7c62dcfe99a4203ab73c9f2ee23a2d4932c99fe364425bd0e06eaa2140b31c1f6cf256c6043ae7f6d0bbca3f340719d03398b150fe6db92720706ff75cd01e786eac18633bb4309d3c464b530a8166dd3b28a50a5c0068f3d4e193f5bb392134d81453a881aa6bf9d88af9af95f29f11767ce96a8a1cd14749ac63f17ba6136cedb578f94688b3419b8612a7ef32f88bb80bcca4f2405cd94e3b377e0df55e2020da0c02091a27e378739f52f271d2a46f2b6f6c5b48cdd02831eca8c1f28d0906c41d85514a6e7f69ba3e1f451d270c83f27d5f8ec5432e22b93ee26043b5a67f3335d65d25f1ff9f8e2628259e2bc1ca9ca32f30f5a7e13b9a5bca839c640c7bfd73529ab782fb48d80ed2f174a0aaf85db127f040a1f370dd462cf98ab1c31f5568c732783bed8abc0990ee44744d6d49a9ea435a60c5111b1baf6d087cbb8bf0011db9fbc4734dfb7b244fc0bac4291efe7084580be1fccde068a0eae5759a2484dda82a0f418f881aeea9121e82d59f4f2c96c58368a63b574e056c591e6cced623bb21d50ad8a6be87f60fc373126212072fb80a00c7786c6c4b5971d222c11f41748b28a207c112c7f6347d2971c1d88ba9a10db8fe6b018041ba355fd65b2970fef674ffaf54dca234f00d5fcf4bdb3f64dea9189efd59d0438d96c9ee9832056198da42373ae7af3cd0c60e287c990179330d858d731f207f4e11eb211dea5c18454bec23ba28abec8823bc170ebcc50f278fa9979c78dcd83972d167624d66e6ae3252a10cb2c752db43d541e79150a88bb07e603a3e3c0c7d6c744b69a0aca736caae1fcb0ede04bdb3d4b399828df9d745bc22124bfb46696b3626051d9814a592c31e9cfbc2a2cd33183e3908e82004fbefb039a95ba1c5318b742b6654667dbc5323707a8c561f3d8db71e1ed4917549f67b479e1b571588311f2ac54dbc6055474713cc76eeb236adfbc8cb7b41dd7efc849bb6ce011869553dc56a5936149ae642f71a9672e0cbacdcbfc5b48dd03dbeac12465749475dfa15484421c7181f459eb0a549033b194fd5bb3c2445bd72287d6fb8f4a49af1e7e8357fa21ca01786f82cc6119252f38116918945a4e616731e1063e99e7a92298035940d107da7f863d5bbbdf90046f6c3e4c1db2c29dd540be0ef130b0882c30977bdef759a8b4f0d876264da373e3610ef99d1a14f1706497a95917a68c92fd227ec1d447cd28e9431e53d70e6146494d72d0dd9b69803a164c8f54d5491536da6013a615bf186acb9ca979f16129ed41e16aaaec743cd6f3e20e894d2dac87eb83bd7d056e996f1f66ceddb11d9b2501e9b4aa6c8415114277b6d61d327d1d17fa674a6501f0d849f8960e11f9a3ef58df1011fb97d41229a452003ccff377ab2e381d663db15656a9a3c670cbb6f5d274f74d9d218e7be0b1cf0a2740d3b10f5fcb1b06d6079e99037af2922c362a8c0c12944295815f1faad07ccc7b2c9dd4001883c18e5c6c8fbb297daabda61755c74f9ebba9545f5bda6ff4b90ca358ff6e92274066b148ef38f2ce4d116aa40a2793723831f18c32ca8e2b2ec235f53fa4bb116ed3c3bc17126821a9d24e03d8eecfb45d3256a2a0c0ebd76e3b77bc6e13e13bb0b083a10532c1bd09029d23afff7aac611da52c0eaf6d6150b8a5e0874cbbee0797562997d1c24a548a78d62014535ae15120ca83df2b2574648ffb86db7afef398b5fee10e91e3a94eb650bda68c678a140cf472efa2b2613aa0f6a5be1587edb0da1b29c279c3f405ab656988774f61f59565d0385f151f03ddb9a23750cd42e195ffa8a810aa3d9220904dc703e8f2e6ae515a05f38c792770127131af73ddf0f9b0c0b911fe897738e89a2f58e587ad791d90e53fbdf37a6efa9b97d3c110b0034f69b06a93b64df9ff0cb1b2fe0e62fe98347e834c6d5b8ffe0c04595d73b0917458a3e3a35a66e3af1dc40f0972d615a4b245bc4fdacc7a516d29cfd78edcc8940e6ca07bebdd97b6087bc6a3d9960141aff66372353543349f8ee6d445161e7da234ed00e53419b4da1456d0df87fbedd2e0e978d6f7779b44e1f8ab181a3a63d8d7a62986baadcd7e57a9166883d2cc4b6053672cce8590c0d14c9226927ec8911c6994239b27e2d8105901fc2a87ddfd285bc6e1a09d86e917057cbdfb64a4dcaf061032ba28dfa356e1cd415802d8676f7e2decaaaf488ab50168eae3cef849e01405762d16c8f191439b1bb203136522c94ece7cfed416d24cbf234903cfc734abb079aa70317f92e560e29f2be3f128ca81e49a0f094ed7ccb9d41601979baf711568a3861bfa1e989bf3050fa12f2920a01e76f4b7af2657c097df32955fdbc366fd70d3c028acb88b80e32c146e6e5159788f2687149aa3171a8adee07aa2b4a083afe94d5c23011f0636a2414820601bd31b3959599535c5a4933413003b12935b250b508a149645ed7ebceb34c4bf14550e770bd15f8369c6fc34d7ff0d2d6c79c9e235803b7dbdbfdbbe8d77fe8dba5cc97baf3f83fe509952541fafcf72b0415a86bdab3c61e6dddeb5f883f7c47a74c2a5afbb1e45d565f756e3d70943277c930b6cef072c9b8cf7d831e7eca275302713bc871729314bf5cd2ce5eef6bd5469e2585c9e21aeb4b8bed3f82649cab457541278d0502852889ec49c11d2f824052a4cc052b0cf9072675bad8f3bfa4ce8c6074d9992769cecc5d06a3127aa27476f9ee7081bef7e00fcc37a8f89b6e15c7b7f57fc7dd93b842285c4c8f20797727e2348c798a18a1923136efdff220c039de551a58074df97bafae53bc3ba72b6ba471d689eb89bba47f658cc7afd5fc586687a49fc2512a612bb47d5409ae1fcb47f87a8036cffc83dd4de627f5291bcfe81c4770fb2c3ce5950b2650f62fe767e55c39664dde895402700994849a7b8f5dbaf93d78a0108429ed02a215b35229024076424be6938c392543a707fe5f233cc3e3ba9432e0bc0795e4180c6005819fbcce019256bd3c3ca5541a5d86df1f0cb7f620adfaa296d8b82fe368c74ed36f7695aada180655106341a3fcfa2c35da4f1c1cb9ba36f7ab14bb194a21753b1c7989134be2890003b03337ff627262b866123c73f2871c0b3f826300351519dfb024d6d6068576823be8f5ae691967bccfb15716cb79bb0cec2e01367d5821f97f3ea417389df48da2405dbd231776e697d65392697ce4f97c22c33787e3385af1532d57d084eca7119a93eb92a1883c91a2acf2de7deb8b887831302f28b0a5ab4c59605e9660fa1811270d28e37cfd7eb095c09611ca85062232c936eb3197fe035d9b508bde377539f3e7659ac3e61739acdfbaaae00b29f71a6ea49d837b407abe9592eec893867dc0bdd9f8c07498fcb40b287bff37389c7f1e732e4af9c07e148d8ae6011e1834778bb5f2a9ce215bf300398e749380f8731ac62ae203cbc1e5d48938ba152adfe26c4d93b1048dec1d270a3f5ccf619f9f0d460098e781482d27be7d755b8da41e0f45ab56406cb5265bfe9072bf43591877efbbbe33c1fabd511ef2ef76e5dfeda50409b896d319660de604fbfb30b5bb00329a10655618944a7278481ca175bd314d4e9a2ed9b830c00f13ac49f4a1ba0c63b984bcc90a2cc49471af227b676b51f0680606c00354a65ad9460f4dd44dcf399387edd4fa9b1f7b3a903011ced108c58f51b93c9ec6afc6b1b693b5c943a20731e1bb61986f7cdb3e872ef251ed448a73869fc3b075ead27884d4b9d674efa441de1cadfe4992957c7d6f40cc201a9a028b04f2fdf7b59e0f10ef20ba4a2adddef4ea4463a6d994c5c79ad728ff727ae966a6e6855618b5453f4ffa42eb4372ce326ed28e7e73e5477b01247cfd25ec650d4fdea1f527ca55562d8b710ce65e181bcdd516903f6154a0d600e75512a424960e50deb47787159d0331fe2a0f1b4025321fe6644897e708ac2e68b41e7394527777928c87d18e83889e0576f346672d4a52af8e37468696e832e94f2426ca76546d2020f83e4f7d9b507c9de8a912628644651a8c444f67e94fab9170e7af7a1fc4279a059c60340d53d50558ebfde9420c6af69733b259c82d48b5d5438f6d735d0d8b4efac7ca10a723811d6c3b1931eb1d11d48133729ce5e1e49cd2203f5dcc43bee0a45f01849273955705cb9a8a08509947407d46862814a2afc4a0c40c23f042618375d1f192f197a310fd65a620a41be9077dd8c6cdba00c53b3242ca6b869aa6eee47eb39da39b7054375fcdcef32f800ecc736e6202fcc1d807e63c28c817c9cdd6e721ce74021b3c872861d036b33db0412bc7e3146a77a2cd44b31e3d0e6e88f4b66a4cce75fa1e0b7cd3c0a4ba4b0446ea112cbd14bb9f9da79a00790b8dc8b946d9414a613ee0e4fe384f2a723fea2dc6627b3e22a2f261a8359fab730091404b979e0babc30af715d03859710c7de47cd683100652a7852bc3fb3d2b05abe0fb4d6ae854198fc84b367d8ad21fbfa9ea4578127472867242d9353fc36caec742bf7032b11d2f5a0e136568623a1b34901352647b5be75785d728cfff60f9f710fb506bb7a9e1a65c26a5926d1e9f0ba3c44280352217969d2857968fed618b52929c41aaa4071a4ff0c8b4192f236c54bf80bebd3673df3b51cac6a8ce8f1ebb9429ac2cda9fcdf22ba0cfa2ab8f9471be49cde77c04a32d0fe7274e6882ef91250ace58dd45d43c17429db0f3b603f5dbe74af362602b5b5a75b5cc84a05b73758238a373d3ba6a7db190b86de1688f46c1975c066377f34e1603a2f9558731f760a54e3ee31893c81b03f40ae89aed7a0053291f575d6f8c63c4e0439b006c1bdbf9044dbad5d07d738a75718b41c82d37b90d7be4051cb8579e82106f3c453ac215fb1d84e8f8863e4fcc08bc15b0926a02a398cdaa79d23bff6dfe9b4f42e3e857bc6758d09992411e66321252c03d440541fb394e19b93330e067e66a1c4ae7c49da15e30c78945696a1121d328387381dd7dc546771b348795bd8f25f0e6321616c3020e6a44a1640de84bd6a4e4a8cc5cf07a64d9151ce3302620618603b0e071f77a694a4eb4021056e65bb55fe00a94930f889fa79ddc449ed735b7937e82ba4799bff9294da536db5113cad5787efa7c7abaf79246c85a8544c98a5dbbc3b2998e8bd9c385c941523b804f140ccb1df00b27cbb20529727cfe9f043948764d482ad4302f311e10e589851198d8f0b4a3ea616fd0f67f173e2bd21b097799f8ed60e23e6be3c9dd6d3d359fc179e5b8ed7f2d1d9832b1505d4807ad4f9d16c6ae90e27bb22cad0bebe31726c5f4efaa64ec849495cf6c2411120d9f2a26991fd0c3848596440650a011d0af945c5b362314a00afcc909d518d86393996a249e0dd7d45adc8497c1b0f21f39424aae71fe1a87e59213a1c407e05cd2f45060763d97d68a7fa88902d032c325c984e503898d1892a2e443f071e238ed52a18aaf9bae5d79685cb70b670b2bf438523cb82e27d511c4f0f573c6f90da7f482a4589a496ce59762e974ea1ab587d42ba240b73dbb9ac0ead432c442cda659e364a863c5473e0e4fb61c287ff47aeb833cd8ae74852ea5e5fea2b040fdfb94d17c63885e55df2161afecf9a6ba18dca1d49f5c655331546e86c332f56f2d0066c7239b0612f6389b26bc38f83581ada2c7351e0bff6ede760cf0a7eb503202bef93c6439bc01082045deb052da3bd7e4331403d6df3ddd35c717c0dd570b72aa5779bb0b0d27494c9511912e89f6fe9b0ebd6bb851a796dbf2965c003403229a0715caceb41927b17ad3d759a09a16fa915baf8cb090beaf89f1e83a4e0d0c8d218761ba55a1d70b4f5412450a7061d37f0775e22579adeff1749a8dfb12274e6900bb3c9119b328fedebe9c9ef150c0de95d3ff2382017b920f954ca0b937b49d9aba21870a4ec3fa2a181ff82d866477f8b8ec65efdcea9355f45d3688f96e3e83726e6daf7b4b1bd9f4c40bd37313ccf8de4355e726eabb3430c23118d49f536e2de83e17b61eb0d8ffb344833acc84b82fc3d2c5fc620ea2bbd8fc6fc923f00f60f23b2ea0fc86f27a2cfde90bf2729c27c6a98df88737830a826de4b270dd2174e5144a20a7123454f67c1884586245f8e829a559fb9df35999dbd9941562bc4d4e3303d343e7dd797426faf811456b024e6349e994d68be6e4f9cac0b019611e331247d5c5002902b8eae26a68c4449c01c5526ae0e1682d76d8a4db86728cdf493d01fd44b1a267bac63e5dd5c0671a4222242d54ed05be1a6f9341b0361c2caa8aa32a8b7d63425871693d1db82727d3b329ee92b46c0c510d4ace111313a61665cd4b93f6fb6020526eda36276cab4780319f70bee2d3016bff55186c67424b28ed490f5ea64fe64a054477df0aabe982fe018a50741bcd599e669e74e77d7702e014b27f3621af52e8f205fc9e83e620e1139e9f3733782892bb8756fbfa7ca6caeea773302ac59b4a85870f3986c81768b9a66a452ac4237c7f4c7cfe4b0bdf61417fb7d6eb8f1a887b5b4b80c84cbc117ae0348ec9caa729b8f14eaaa5be506b692f7386dec120d0aff4c41d37fe71ef7c9cdcc00659c45d8cc2e27f50a9280e9ffff27396b76cd640ea43dd4431f0d4ddefda0ea29bbee8d964eb8b36ce5c49d6a728c45f5fb4868dd30ce5a8dd3a4953b37c669e90667ef75ea519e17d748b353de7c6b217c16f1e4d1988f6cc8f13bc3c0890885c3279bd4436e2a93c61335a9d4f7c7f71f3bcbf34ad3f6666cd2a68dccf41f2ef9f82bae1119a2b32f3d1c1fcb5689413fae002de972dd3e266dfcaa807739458374b5631896e0df1969b2c2f7893fb3e4b9ca58880353e5063ccb4aadca4f25bdd70e9d9f53d21c4dfcd86697f6af86e475e480304abc21ed0dbc34f2173aee8fee4ac6b6aab72037a5d0d01d2afbbc7b3b21b2b8e75704e4c49f2a1b27d094ca6d2418c1539034b4992968fd131b6837248b5ef07da68794f81093df34b0c719001eba2a6902b7734c418c4cd5482c995b7fa1ed0edd9991845deac330fa959297536a7342a19ba24100e53dc7f1f8973d0e7bba3411aa6cfde6c16a6143c8abb9df590daf9d134cd8c586dde6f4b4e9a8f4f7eab5024cb618f8847a30d97ee04356df650daeaf109f8b6e640614c6459dd9f7209396ddf5ce2637669c1baa15ec9f216f13e4339b0b173c0a36893e6c712817d9d35b58d22360ceb114b95673da1b411efc280673daddb13502b8a3d6122e7c9e4a026a4c3e158d7de9a38520daefcbdeb8223c5fee58d4386432201d0f0eaa80aee9193e58efcad380527e3596f3a722688f117183bf166d2dd42a4962b5a50c59c011ab4023901d4fbf5da00f19532ee53e647db9001c113deda27fa0c5c36236edde889afa44c52961f2af24ea848c875ac29058274513312d0c929d869fac46c298aaaa0acea14e3d9e3e60093c93bf4ea43b46edd5e893ccca961fb87396e1f2ac208ab7c337c810b093774f43a09e11f80153737b10c026c4c74920879dcf9b7253a5cab334ddef2b3e2503b448beab6e16a911f4a3c1bd97c107c160c9ee80ad24c6cee7b512cc4c6608456b75f477117c07cd45b6791bd8824fdd6625156294e92a68afa07431b2abf1b04f96410d31a7585de0d4072ae3333108c94ebbf658aa4c98d95b61a9b5a4c2721741617df282f12be74413443737ffef7baa765d955e3cde6cd0ac5391f1480054f8ee761e1e83b6cb86ccd6a3c3849f49addb071b7229fdf2234c2c6d90ba778c7e29572574697b076fc0d5dd2dd0e7936bd39c3f872f72327ce3c5e769c6b657e34c8b8721c412f7d1bcb664b2c9cf09aa4a36d39c4beabd1a996ae5caa4d9e2eca9a975f86206f4987ff4aa1c03192c428e27b37c6f3e36ac0b65b96c2aa3a3da4f6b3dc3548b088b26c676684ca0cdf85a69085c0d6a8c65f78a69419060df005701cd85fa5dacceb9d7a5f56b00201088412d2a649c47769ff7fc2bd91f4263d3b473347488dca5c53a775075e8d0d33d2ef30fcd9fb47cffa140cfc26267ed22ef8153c178a31fd4a01626dcea4bfa9cca5025e3bfdd0c0d69b81153410e77d28cd1603bee036f995029a42fc4ae9f0b48c24c240124b53a42077ea3507df1c0175709cb0e2666657c397c9f54f83b6742958e64244e87c23f1b6421781a0bfae50db33645ef60510e1f5a2f7bb2b1b35e26c755542047811a6673dc1cedeee8beb49cac57fbfaf84bda9690684c19da782200e2b6dc2e0a6293def697a5b3ad40c80ba3b45177d9080856f2ba5ffa9cd815e7ce132c46c8c4f4e66179347d370e945f49e3432022b220890a1407b0f30332583dcd8564ef6a6b2d34aea0be32705280addfbd07ad64cf455c50ad11ff460818ff37cdaa94e0789c542a318f7e9b459c21c243863a87625891232c466dc0045822a93db5dc21062e7c38504061ae4667e329765617e5ec07feb97613da7775fbd8db9e87a15bfc1b546f6aef9c4cf02aaa14e52bd01d7548777c9f29e828b1a392a45988001b210beeb69669b959c586ba4b7851dbf9771b5", 0x2000, &(0x7f00000051c0)={&(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x2, {0x7, 0x2b, 0x8000, 0x10014300, 0xff, 0x3, 0x2, 0x9, 0x0, 0x0, 0x1, 0x3}}, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0x4}}, &(0x7f0000000340)={0x18, 0x0, 0x5, {0x6}}, &(0x7f0000000380)={0x18, 0x0, 0x1980000000, {0x45}}, &(0x7f00000003c0)={0x18, 0x0, 0x2, {0xbf53743}}, &(0x7f0000000400)={0x28, 0xfffffffffffffffe, 0x1, {{0x650, 0x6, 0x1}}}, &(0x7f0000000440)={0x60, 0xffffffffffffffda, 0x9, {{0x101, 0x7, 0x8000000000000000, 0x8, 0x1, 0x3, 0x129, 0xfffffffe}}}, &(0x7f0000000780)={0x18, 0x0, 0x0, {0x3}}, &(0x7f0000000800)={0x11, 0x0, 0xfffffffffffffffc, {'\x00'}}, &(0x7f0000002880)={0x20, 0x0, 0x0, {0x0, 0x2}}, &(0x7f0000002900)={0x78, 0x0, 0x65, {0xffffffff, 0xb02, 0x0, {0x3, 0x4, 0x5, 0x6, 0x0, 0xffff, 0xe, 0x8, 0x6c, 0x2000, 0x7ff, 0x0, 0x0, 0xf6, 0x105}}}, &(0x7f00000049c0)={0x90, 0x0, 0x8000000000000001, {0x0, 0x0, 0xa5, 0x100000001, 0x4, 0xffffffff, {0x0, 0xfffffffffffffffd, 0x7, 0x20000000000, 0x5, 0x8, 0x5, 0x1, 0xca35111, 0x2000, 0x3, 0x0, 0x0, 0x8, 0xeb99}}}, &(0x7f0000004a80)={0x138, 0x0, 0x6, [{0x3, 0x4, 0x1, 0x0, '\x00'}, {0x5, 0x100000000, 0x12, 0x7, '/dev/snd/midiC#D#\x00'}, {0x1, 0xa, 0x3, 0xc0, '\\\'['}, {0x0, 0x9, 0xffffffffffffff51, 0x773, '/dev/snd/midiC#D#\x00'}, {0x2, 0x5c, 0x2, 0x101, ':#'}, {0x3, 0x10000, 0x4, 0x200, 'GPL\x00'}, {0x3, 0x3, 0x4, 0x9a, 'GPL\x00'}, {0x3, 0x5, 0xf, 0x0, '/dev/sequencer\x00'}]}, &(0x7f0000004c00)={0xc0, 0x0, 0x80000, [{{0x3, 0x3, 0x6, 0x4, 0x78, 0x9, {0x4, 0x8000, 0x4, 0x1, 0xfffffffffffffffc, 0x8, 0x3, 0x8, 0xfffffffc, 0x0, 0x401, r5, r7, 0xffffa34e, 0x5}}, {0x6, 0x4, 0x12, 0x4, '/dev/snd/midiC#D#\x00'}}]}, &(0x7f0000004e40)={0xa0, 0x0, 0xffffffffffffffff, {{0x2, 0x0, 0x5, 0x101, 0x3, 0x8, {0x3, 0x800, 0x10, 0x80000001, 0x6, 0x8, 0x80000001, 0xfffffe01, 0xb, 0x1000, 0xfffffff8, r8, r9, 0x9, 0x1}}, {0x0, 0x4}}}, &(0x7f0000004f00)={0x20, 0x0, 0xfff, {0x5, 0x0, 0xc00, 0x7}}, &(0x7f0000005080)={0x130, 0x0, 0x7, {0x47, 0x7, 0x0, '\x00', {0x10, 0x80000001, 0xae, 0x6, r10, r14, 0xc000, '\x00', 0x101, 0x9, 0x9, 0xa, {0x10001, 0x6}, {0x0, 0x7ff}, {0x4, 0x7fff}, {0xb, 0x5}, 0xff, 0xc9, 0x4}}}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000140)="0f20e035000040000f22e066ba6100ed48b88a39e735000000000f23c80f21f835040090000f23f866baa100ed0f060f01b880960000b980020000b800800000ba000000000f30cdb90f320f8700000080", 0x51}], 0x1, 0xa, &(0x7f0000000640), 0x0) 6.090352388s ago: executing program 6 (id=2380): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x2e, 0x61, 0x5f, 0x30]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) (fail_nth: 10) 5.642596708s ago: executing program 6 (id=2381): chdir(&(0x7f0000000000)='./cgroup\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @local, 0x2b}, {0xa, 0x4e21, 0x0, @mcast1, 0x3ee1}, r1, 0x3}}, 0x48) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x6a7, 0x7, 0x1ffd, 0x2}, 0x14) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x6a7, 0x7, 0x1ffd, 0x2}, 0x14) listen(r2, 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.444771953s ago: executing program 8 (id=2382): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) r2 = socket(0xa, 0x5, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x20000000000008, 0x2, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e000002000000000000e00000000000000200"}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}]}]}]}}]}, 0xa8}}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000"], 0xfe33) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x480}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x54}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x30, r11, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008020}, 0x40010) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r6, 0x0, 0x0, 0x80800) setsockopt$sock_int(r12, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988476d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvfrom$x25(r12, &(0x7f0000000000)=""/80, 0x50, 0x10000, 0x0, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000300fe00850000008600000018010000", @ANYRES64=r2, @ANYBLOB="0000000015a639ed2db2966a05000000798af8ff12100000bfa200000000000007020000f80200000085000000a60000009500000000000000000000000000000056ed288ce62a1fc208728536b1609c6923756ed2be2df39f4566bb25d5964a793e"], &(0x7f0000000580)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0xd4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.354137982s ago: executing program 4 (id=2383): syz_io_uring_complete(0x0) r0 = syz_clone(0x1000000, &(0x7f0000000480)="2734c2d286d38bb6237cd406671e441fd62edaa7093f76b14268bd765c8c07fa11ba7493f75c3064a628737165af1e87174c83a32d83cb72e03d59f4be1fb9af208a9d5a131c14e5ecd2898b13f038ab7178fe5297c6fb470ab6f4da7188d155d992444a4509217199f1b36d7e3a035a18e1c329871cc49b49d4a60c3761bd4f05dfd7e803994fb73fc0bab905e0e68fa7b9f03538e305b02d182d7b2677f5a209d21d6395777f24552800112bfa979ffdaea35ad499", 0xb6, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f00000006c0)="c6acf6a8a04a59499d9bf62e7c0de7ec31555ba8fa0c3fcb89c3b6859a6601c8fb37f2c189303df1ab5b7c50b8b33c7d00100072b38757d13562f06efc7e3f5d01455ba914da02a9c8c4586ab08efcb4132781cb36b9d0f66550bce0c3f5c72743e8ebc0294bd9738dd82146815a554807ba5e59952571dff3d484eab85f7dd0611f20444c86d8f39b0d07c482a9a467afd0bb31e1af43e6d8685d913867cff353a0b1753aa30159f2719e3b34c3432cda749d296b227a87c63d6903f19e96c974ce30932deacc38e03316dbcd35ac0e86da") capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000300)={0x20000000}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r4, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3c}}, 0x0) fremovexattr(r6, &(0x7f0000000180)=@known='security.apparmor\x00') r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r10, 0x89eb, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10010, r1, 0x1b02000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) r11 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000040)={0x0, r11}) 3.953341931s ago: executing program 6 (id=2384): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {}, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}]}]}, 0x17c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x36]}}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) socket$nl_route(0x10, 0x3, 0x0) 3.766679187s ago: executing program 8 (id=2385): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140)=0x7, 0x4) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4044804) (async) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_GETXATTR(r5, &(0x7f00000004c0)={0x18}, 0x18) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r9 = syz_open_dev$midi(&(0x7f0000000200), 0x2, 0x40081) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r9, 0x40045730, &(0x7f00000022c0)) (async) r10 = geteuid() quotactl_fd$Q_SETINFO(r9, 0xffffffff80000600, r10, &(0x7f0000000280)={0x4, 0xc7, 0x0, 0xb}) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, r8, {0x7, 0x29, 0x20200}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfDno=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscache,\x00']) (async) r11 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) r12 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) sendto$inet(r12, &(0x7f00000000c0)="2b2cc339b53faacd8f53a82afe93847f5905a5315cf148dbc6ecea09497757e29d4efde93cb5ee2ca44ad176115e6998a3aaaf7c43", 0x35, 0x10, 0x0, 0x0) 3.553959506s ago: executing program 5 (id=2386): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000005000000b9"]) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') unshare(0x6a040000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x200000c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099004000000000000000100019800c"], 0x38}}, 0x0) syz_usb_connect$uac1(0x1, 0x8f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109027d0003010000040904000004010100000a24010400000201021324060500060800000000000000000000000009047a9000010200000904010101010200000b24020100000000182b4409050109"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/snmp\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) bind$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000900)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r5, 0x1}}, 0x18) chdir(&(0x7f0000000140)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x0, 0x5b81, 0xfffffffffffffffc, 0xffffffffffffff7f, 0x9, 0x2, 0x4, 0x2, 0xde}) r7 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940), 0x17, 0x6}}, 0x20) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0x9, '(3qg'}, @main=@item_4={0x3, 0x0, 0xb, "1ce93ee9"}, @global=@item_4={0x3, 0x1, 0x7, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @main=@item_4={0x3, 0x0, 0xb, "b9585dde"}, @global=@item_012={0x1, 0x1, 0x8, '\r'}, @local=@item_4={0x3, 0x2, 0x0, "01070100"}, @main=@item_4={0x3, 0x0, 0xb, "31654111"}]}}, 0x0}, 0x0) syz_usb_connect$uac1(0x6, 0xd6, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x8, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x5}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0x3, 0x2, "715b88"}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x1, 0x1, "10b95269"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x3, 0x4, 0x200, 0x2, 0x8}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x0, 0x3, {0x7, 0x25, 0x1, 0x80, 0x6, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x8, 0x7, {0x7, 0x25, 0x1, 0x1, 0x2, 0x1ff}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x6, 0x5, 0x1, 0x8, 0x8}, 0x35, &(0x7f0000000540)={0x5, 0xf, 0x35, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "b13abb799c1e1bde38b1746c28b72216"}, @ptm_cap={0x3}, @ss_cap={0x0, 0x10, 0x3, 0x2, 0x1, 0x2, 0x0, 0x8}, @generic={0x0, 0x10, 0xa, "08a13910dc"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000580)=@string={0x0, 0x3, "2fba13d9b3a3d1c24e978309a0970cd88f244324b9170023e146d3d83618c12a4546ad43369d8af0837f624417286f77b0481b589e512f0bb878cd5f6db4b7f6c4e5e2c4380ae1739066c7c8276181b154a93a19aa3b619b3c205043b6e576a910d9ffae5768a5379571b15e6cb4335829c1ce7e22a0e78a2ce85e63036ad1565f8ff33ce7d08a5ceadd64d166af604b57dc063db0de653aec9b5818175b2a4fc5ab4f462bfe4589c5"}}, {0x2c, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40b}}, {0x38, &(0x7f0000000300)=@string={0x38, 0x3, "c75dc91aecf596c05d36665ad526bf812a1b6415816da58985caebead7a373f9e44c28fa9b1b32fadb8df7c83c747e73504977ca2aab"}}, {0x8e, &(0x7f0000000340)=@string={0x8e, 0x3, "910d68242753c72077f2219cbca51ebb793ca7a0a32a4974549595fa40ae32fb6e85b31940798b97bf8a3d8548f7db8aa40c5cfeec4f7dafe6bfbd879f852b82c60a992e1aca688e479c52e7a0f6a469c97c51efb333ebdf470b9e71e39925b486e04b78feb1c5be4b037ec7539892d52d0f302a1da4910d48b055d24f019264357a8774f462ab386c3a8c10"}}, {0xba, &(0x7f0000000400)=@string={0xba, 0x3, "33a411af9f1294dfca96734176ba98c59810d92a5a517e803c3c73160c1e5c57d302c5e66e10aee121088f45f34718fe134633f66cae1748122ab7f6002a47c866a379ad10f73d612e4dc2099f62c7a5970ef4b01ef5df4932b3ff6d6e356aa6cdadd4b5e61d6fb5ff5997e3abf40fb011a5e5458ce0d8769dff33873f769ef4375e658a944916743b9601588de112a9cbdabfc200bbe442bbc2d1121a52d83af240074e2f1d7c3ff754e91d587eef8ac61674e0236ccbf5"}}]}) 3.544128515s ago: executing program 9 (id=2387): syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xffff, 0x0}, 0x8) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x2082, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7800, 0x9, 0x2, {{0x22, 0x4, 0x2, 0x2f, 0x88, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@generic={0x89, 0x10, "c7f05f86d3df45fec83d5acbb463"}, @timestamp_prespec={0x44, 0x1c, 0xc3, 0x3, 0x7, [{@multicast1, 0xa}, {@loopback, 0x40}, {@private=0xa010101, 0x4}]}, @lsrr={0x83, 0x7, 0x6d, [@local]}, @rr={0x7, 0x1b, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @private=0xa010101, @local, @multicast1]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x6b, [@loopback]}, @timestamp_prespec={0x44, 0xc, 0x44, 0x3, 0xb, [{@loopback, 0x4}]}, @rr={0x7, 0xb, 0x84, [@local, @rand_addr=0x64010100]}, @generic={0x82, 0x2}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', r4, 0x2f, 0xf7, 0x5, 0x37f, 0x12, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x80, 0x7, 0x7fff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x11223}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r6, r2, 0x4, r2}, 0x10) 3.208861077s ago: executing program 9 (id=2388): sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000440)='./file0\x00', 0x10500, 0x34) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x8, 0x3, "02b51112"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.488899759s ago: executing program 4 (id=2389): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x32, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x6}, @code={0xa, 0x5d, {"410f017800c482fd3453790f01cf660f3a22b7614c00005a48b8b2240000000000000f23d00f21f835300000020f23f866b8d3000f00d88f2878c1500f056744f88f4978e3218f69d89a6800"}}, @wrmsr={0x1e, 0x20, {0x8ff, 0x2ca}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x14, 0x18, {0x437, 0xaa35}}, @code={0xa, 0x62, {"660f38813666400f231f4c0fc719c4a1fa7ec966baa10066ed2e439cf30fc7b7c78a0000b9800000c00f3235008000000f30c744240000000000c7442402d2d5eb43c7442406000000000f011c2467f398"}}, @rdmsr={0x32, 0x18, {0xb4c}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x14, 0x18, {0x3, 0x3}}, @wrmsr={0x1e, 0x20, {0x24e, 0x100}}, @code={0xa, 0x71, {"3e0f01c9c42189e53248b8bf4fffffffffffff0f23c80f21f8350800f0000f23f80f060f01c3c4814df647a048b800000000010000000f23d80f21f835000000900f23f8b9f2030000b825d31b85ba000000000f3044d9eb440fc72d32690000"}}, @wr_crn={0x46, 0x20, {0x4, 0xfff}}, @rdmsr={0x32, 0x18, {0xb89}}, @cpuid={0x14, 0x18, {0x6, 0x7}}, @rdmsr={0x32, 0x18, {0x897}}, @wrmsr={0x1e, 0x20, {0x40000432, 0xffffffffffffffff}}, @wrmsr={0x1e, 0x20, {0x232, 0x9}}, @rdmsr={0x32, 0x18, {0xbef}}, @rdmsr={0x32, 0x18, {0xb2e}}, @wr_crn={0x46, 0x20, {0x8, 0x2}}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @uexit={0x0, 0x18}, @rdmsr={0x32, 0x18, {0xaf3}}], 0x348}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 1.488353133s ago: executing program 9 (id=2390): pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000000)={0x2, 0x0, [{0x80000000, 0x4, 0x2, 0x4, 0x10000, 0xffffffff, 0x40000}, {0x80000008, 0x9, 0x0, 0x400, 0xfff, 0xfff, 0x7}]}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x48000) 1.488025411s ago: executing program 6 (id=2391): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x2e, 0x61, 0x5f, 0x30]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) (fail_nth: 11) 1.258147334s ago: executing program 9 (id=2392): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a00"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.177706923s ago: executing program 6 (id=2393): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0800, 0x0) fallocate(r0, 0x20, 0x8, 0x7fffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x841) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x103400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xb, &(0x7f00000007c0)={0x6, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f00000001c0)=0xf, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) close(0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) pipe(&(0x7f0000000140)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="0800000000d9000000000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r0, 0x34, 0x0, 0xffffffff, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0]}, 0x40) 248.979127ms ago: executing program 9 (id=2394): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xb, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r8, @ANYRESDEC=r5, @ANYRES16=r0, @ANYRES64=r5, @ANYRES64=r1, @ANYRESDEC=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r9}, 0x18) sendmmsg$inet6(r8, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000580)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r11, 0x1, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f0000000300), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0]}, 0x40) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x40040) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xffc0, 0x9, 0x3, 0x6}, 'syz1\x00', 0x1000000e}) ioctl$UI_DEV_CREATE(r0, 0x5501) 218.282842ms ago: executing program 4 (id=2395): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000440)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000600)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000640)='net/kcm\x00') r5 = syz_open_dev$dri(&(0x7f0000000680), 0x1, 0x8001) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f00000006c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000700)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r5, 0xc01864cd, &(0x7f00000007c0)={&(0x7f0000000740)=[r6, r7], &(0x7f0000000780)=[0x8, 0x401, 0x1ff, 0x4], 0x2, 0x1}) syncfs(r5) r8 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r8, &(0x7f0000000880)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '', 0x20, 0x6}, 0x2a, r9) bind$llc(r4, &(0x7f0000000940)={0x1a, 0xffff, 0x9, 0x0, 0x2, 0x9, @broadcast}, 0x10) r10 = dup2(r4, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r10, 0xc08c5334, &(0x7f0000000980)={0x7, 0x7fff, 0x1, 'queue1\x00', 0xffffffff}) ioctl$KVM_RUN(r10, 0xae80, 0x0) prlimit64(r3, 0xb, &(0x7f0000000a40)={0x3, 0x7}, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000001d80)={&(0x7f0000000ac0), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/161, 0xa1}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f0000001d40)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x42) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000001ec0)={&(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0], &(0x7f0000001e80)=[0x0], 0x4, 0x4, 0x1, 0x1}) keyctl$link(0x8, r8, r8) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000001f00)) r13 = syz_open_procfs$userns(r12, &(0x7f0000001f40)) ioctl$F2FS_IOC_MOVE_RANGE(r13, 0xc020f509, &(0x7f0000001f80)={r0, 0x45, 0x3, 0x2}) mkdir(&(0x7f0000001fc0)='./file0\x00', 0x81) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x48, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x1b}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1eaf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x4880) 217.549283ms ago: executing program 6 (id=2396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x208080, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3083bce9b1faa7b0}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x224, r8, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xee}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9a59}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "859ea713be5a1b8a601fae40f259e18eb7f751e705a8a5e35334f541"}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x80}, 0x4) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) r9 = eventfd2(0x80, 0x80800) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r6, 0x10001, 0x1, r9}) (async, rerun: 32) mlockall(0x7) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 98.028918ms ago: executing program 5 (id=2397): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x3, 0x99, 0x15, 0x5, 0xfc, 0x5, 0xfb, 0x3, 0x5d, 0x8, 0x81, 0x84, 0x0, 0x5}, 0xe) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r0, 0x1) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/195, 0xc3}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006a030000000000001d400500000000004704000001ed000072030000000100001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 4 (id=2398): r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) fcntl$setstatus(r1, 0x4, 0x0) r2 = dup(r1) copy_file_range(r1, 0x0, r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) kernel console output (not intermixed with test programs): e [ 601.781011][ T5931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.790537][ T5931] usb 9-1: Product: syz [ 601.794875][ T5931] usb 9-1: Manufacturer: syz [ 601.799466][ T5931] usb 9-1: SerialNumber: syz [ 601.845546][ T10] usb 6-1: config index 0 descriptor too short (expected 65527, got 18) [ 601.857322][ T10] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 601.897394][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.905891][ T10] usb 6-1: Product: syz [ 601.933228][ T10] usb 6-1: Manufacturer: syz [ 601.937982][ T10] usb 6-1: SerialNumber: syz [ 601.946266][ T10] usb 6-1: config 0 descriptor?? [ 601.956598][ T10] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 601.965653][ T10] usb 6-1: Detected FT232H [ 602.021155][ T5931] usb 9-1: selecting invalid altsetting 0 [ 602.038360][T12384] netlink: 'syz.4.1638': attribute type 3 has an invalid length. [ 602.046325][T12384] netlink: 'syz.4.1638': attribute type 3 has an invalid length. [ 602.057796][T12384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1638'. [ 602.096323][ T5931] usb 9-1: selecting invalid altsetting 0 [ 602.147318][ T5931] usb 9-1: USB disconnect, device number 18 [ 602.163067][T12373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.171971][T12373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.284724][T12392] xt_hashlimit: max too large, truncated to 1048576 [ 604.127381][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 604.330535][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 604.583278][ T10] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 604.875316][ T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 605.070938][ T10] usb 6-1: USB disconnect, device number 27 [ 605.256157][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 605.275191][T12406] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1643'. [ 605.368057][ T10] ftdi_sio 6-1:0.0: device disconnected [ 606.779737][T12425] netlink: 'syz.7.1650': attribute type 3 has an invalid length. [ 606.787570][T12425] netlink: 'syz.7.1650': attribute type 3 has an invalid length. [ 606.795679][T12425] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1650'. [ 607.757817][T12450] 9pnet_fd: Insufficient options for proto=fd [ 608.425709][ T5840] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 609.496978][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1661'. [ 609.685016][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 609.691905][ T5840] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 609.724685][ T5840] usb 6-1: config 0 has no interface number 0 [ 609.731168][ T5840] usb 6-1: config 0 interface 89 has no altsetting 0 [ 609.745884][ T5840] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 609.763161][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.774068][T12474] overlay: ./file0 is not a directory [ 609.814318][ T5840] usb 6-1: Product: syz [ 609.828654][ T5840] usb 6-1: Manufacturer: syz [ 609.853956][ T5840] usb 6-1: SerialNumber: syz [ 609.871981][ T5840] usb 6-1: config 0 descriptor?? [ 609.924687][ T5840] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 609.967185][ T5840] em28xx 6-1:0.89: Video interface 89 found: bulk [ 610.183303][ T5974] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 610.232406][ T30] audit: type=1326 audit(2000000494.319:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12491 comm="syz.4.1670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x0 [ 610.364257][ T5974] usb 9-1: Using ep0 maxpacket: 8 [ 610.386232][ T5974] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.398365][ T5974] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 610.427101][ T5974] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 610.480702][ T5974] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 610.492459][ T5974] usb 9-1: Product: syz [ 610.496936][ T5974] usb 9-1: Manufacturer: syz [ 610.502514][ T5974] usb 9-1: SerialNumber: syz [ 610.551646][ T5974] usb 9-1: config 0 descriptor?? [ 610.552601][ T5840] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 610.769611][T12480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.787545][T12480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.831488][ T5974] usb 9-1: USB disconnect, device number 19 [ 610.942508][T12504] netlink: 2088 bytes leftover after parsing attributes in process `syz.8.1672'. [ 611.044030][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 611.475172][ T5840] em28xx 6-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 611.489647][ T5840] em28xx 6-1:0.89: board has no eeprom [ 611.532028][T12514] tipc: Can't bind to reserved service type 2 [ 611.743326][ T5840] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 611.750595][ T5840] em28xx 6-1:0.89: analog set to bulk mode. [ 611.793569][ T10] em28xx 6-1:0.89: Registering V4L2 extension [ 611.821345][ T5840] usb 6-1: USB disconnect, device number 28 [ 611.856660][ T5840] em28xx 6-1:0.89: Disconnecting em28xx [ 611.911378][T12525] vlan2: entered allmulticast mode [ 611.931047][T12525] team0: entered allmulticast mode [ 611.940504][T12525] team_slave_0: entered allmulticast mode [ 611.948342][ T10] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 611.963276][T12525] team_slave_1: entered allmulticast mode [ 611.976356][ T10] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 611.983900][ T10] em28xx 6-1:0.89: No AC97 audio processor [ 611.997250][T12525] team0: Device vlan2 is already an upper device of the team interface [ 612.013837][ T10] usb 6-1: Decoder not found [ 612.018819][ T10] em28xx 6-1:0.89: failed to create media graph [ 612.028184][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1677'. [ 612.037318][ T10] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 612.048487][ T10] em28xx 6-1:0.89: Registering snapshot button... [ 612.055075][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1677'. [ 612.067242][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input33 [ 612.093495][ T10] em28xx 6-1:0.89: Remote control support is not available for this card. [ 612.103021][T12527] netlink: 'syz.8.1677': attribute type 7 has an invalid length. [ 612.112324][ T5840] em28xx 6-1:0.89: Closing input extension [ 612.119652][ T5840] em28xx 6-1:0.89: Deregistering snapshot button [ 612.181532][ T5840] em28xx 6-1:0.89: Freeing device [ 612.972949][T12549] netlink: 'syz.5.1682': attribute type 3 has an invalid length. [ 612.983253][T12549] netlink: 'syz.5.1682': attribute type 3 has an invalid length. [ 613.062295][T12549] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1682'. [ 613.226147][ T9657] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 613.452138][ T9657] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 613.503156][T12554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1685'. [ 613.510889][ T9657] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.548149][ T9657] usb 9-1: Product: syz [ 613.594064][ T9657] usb 9-1: Manufacturer: syz [ 613.605456][ T9657] usb 9-1: SerialNumber: syz [ 613.667619][ T9657] usb 9-1: config 0 descriptor?? [ 613.792293][ T9657] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 614.589961][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1687'. [ 614.599465][T12559] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1687'. [ 614.610316][T12559] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1687'. [ 614.646867][ T9657] gspca_sunplus: reg_r err -71 [ 614.661962][ T9657] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 614.692346][ T9657] usb 9-1: USB disconnect, device number 20 [ 614.852306][T12562] netlink: 1832 bytes leftover after parsing attributes in process `syz.5.1688'. [ 615.413011][T12573] netlink: 'syz.7.1692': attribute type 3 has an invalid length. [ 615.420936][T12573] netlink: 'syz.7.1692': attribute type 3 has an invalid length. [ 616.893223][ T9657] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 617.196665][ T9657] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 617.344102][ T9657] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.504358][ T9657] usb 6-1: Product: syz [ 617.508648][ T9657] usb 6-1: Manufacturer: syz [ 617.518010][ T9657] usb 6-1: SerialNumber: syz [ 617.539590][ T9657] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 617.749404][ T5945] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 617.966031][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 618.163647][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.174925][ T9657] usb 6-1: USB disconnect, device number 29 [ 618.181211][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.182849][ T10] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 618.182876][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 618.182897][ T10] usb 8-1: SerialNumber: syz [ 618.708298][ T10] usb 8-1: 0:2 : does not exist [ 618.792021][ T10] usb 8-1: USB disconnect, device number 23 [ 618.956804][ T5945] usb 6-1: Service connection timeout for: 256 [ 619.343309][ T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 619.451507][T12621] __nla_validate_parse: 2 callbacks suppressed [ 619.451527][T12621] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1704'. [ 619.684053][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 619.722422][ T10] usb 8-1: config 0 has an invalid interface number: 32 but max is 0 [ 620.119044][ T10] usb 8-1: config 0 has no interface number 0 [ 620.208632][ T10] usb 8-1: config 0 interface 32 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 620.319009][ T5945] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 620.329529][ T5945] ath9k_htc: Failed to initialize the device [ 620.338162][ T9657] usb 6-1: ath9k_htc: USB layer deinitialized [ 620.403953][ T10] usb 8-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=15.e8 [ 620.466069][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.513240][ T10] usb 8-1: Product: syz [ 620.523392][ T10] usb 8-1: Manufacturer: syz [ 620.541725][ T10] usb 8-1: SerialNumber: syz [ 620.585848][ T10] usb 8-1: config 0 descriptor?? [ 620.604126][T12628] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 620.619232][ T10] s2255 8-1:0.32: Could not find bulk-in endpoint [ 620.728211][ T10] Sensoray 2255 driver load failed: 0xfffffff4 [ 620.836181][T12645] netlink: 'syz.5.1711': attribute type 3 has an invalid length. [ 620.843997][T12645] netlink: 'syz.5.1711': attribute type 3 has an invalid length. [ 620.852101][T12645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1711'. [ 621.119874][ T10] s2255 8-1:0.32: probe with driver s2255 failed with error -12 [ 621.435334][T12661] input: syz0 as /devices/virtual/input/input35 [ 621.978671][ T9657] usb 8-1: USB disconnect, device number 24 [ 622.498263][T12684] netlink: 'syz.7.1719': attribute type 2 has an invalid length. [ 622.527060][T12684] netlink: 'syz.7.1719': attribute type 1 has an invalid length. [ 622.554938][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1719'. [ 623.103674][T12692] netlink: 'syz.5.1723': attribute type 3 has an invalid length. [ 623.111454][T12692] netlink: 'syz.5.1723': attribute type 3 has an invalid length. [ 623.122864][T12692] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1723'. [ 624.236631][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.243125][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.011442][T12713] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1728'. [ 625.159262][T12719] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 625.170449][T12719] overlayfs: failed to resolve './file0': -2 [ 625.219723][T12720] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 625.513260][ T977] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 625.705639][ T977] usb 9-1: config 0 interface 0 has no altsetting 0 [ 625.719614][ T977] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 625.739146][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.760223][ T977] usb 9-1: config 0 descriptor?? [ 626.189389][ T977] kye 0003:0458:5013.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 626.209307][ T977] kye 0003:0458:5013.000D: hidraw0: USB HID v0.06 Device [HID 0458:5013] on usb-dummy_hcd.8-1/input0 [ 626.221669][ T977] kye 0003:0458:5013.000D: tablet-enabling feature report not found [ 626.234477][ T977] kye 0003:0458:5013.000D: tablet enabling failed [ 627.084228][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1739'. [ 627.105117][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1739'. [ 627.160114][T12746] ntfs3: Bad value for 'gid' [ 627.165763][T12746] ntfs3: Bad value for 'gid' [ 627.260687][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1735'. [ 627.474462][T12756] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 628.676876][T12763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.686036][T12763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.469707][ T977] usb 9-1: USB disconnect, device number 21 [ 629.729178][ T30] audit: type=1326 audit(2000000513.819:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 629.757445][ T30] audit: type=1326 audit(2000000513.849:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 629.787745][ T30] audit: type=1326 audit(2000000513.849:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 629.818123][ T30] audit: type=1326 audit(2000000513.849:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 629.844431][ T30] audit: type=1326 audit(2000000513.849:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 629.928921][ T30] audit: type=1326 audit(2000000513.849:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 630.127130][ T30] audit: type=1326 audit(2000000513.849:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 630.149285][ T30] audit: type=1326 audit(2000000513.849:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 630.316617][T12786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 630.728598][ T30] audit: type=1326 audit(2000000513.909:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 630.833220][ T30] audit: type=1326 audit(2000000513.909:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12776 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 631.012014][T12793] netlink: 'syz.5.1753': attribute type 10 has an invalid length. [ 631.788613][T12806] overlayfs: missing 'lowerdir' [ 632.133293][ T9657] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 632.313456][ T9657] usb 6-1: Using ep0 maxpacket: 32 [ 632.322705][ T9657] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 632.332525][ T9657] usb 6-1: config 0 has no interface number 0 [ 632.351245][ T9657] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.376571][ T9657] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.423352][ T9657] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 632.452810][ T9657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.516150][ T9657] usb 6-1: config 0 descriptor?? [ 632.619251][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1761'. [ 633.368816][ T9657] input: HID 28bd:0094 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0094.000E/input/input36 [ 633.477756][ T9657] uclogic 0003:28BD:0094.000E: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.5-1/input1 [ 633.523262][ T977] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 633.557856][T12810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.575550][T12838] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1766'. [ 633.595194][T12810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.615750][ T10] usb 6-1: USB disconnect, device number 30 [ 633.623929][T12838] ip6gretap0: entered promiscuous mode [ 633.632854][T12838] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1766'. [ 633.706306][ T977] usb 9-1: Using ep0 maxpacket: 8 [ 633.736128][ T977] usb 9-1: config 2 has an invalid interface number: 192 but max is 2 [ 633.762523][ T977] usb 9-1: config 2 has an invalid interface number: 43 but max is 2 [ 633.774596][ T977] usb 9-1: config 2 has an invalid interface number: 29 but max is 2 [ 633.782799][ T977] usb 9-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 633.791622][ T977] usb 9-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 633.803854][ T977] usb 9-1: config 2 has no interface number 0 [ 633.809958][ T977] usb 9-1: config 2 has no interface number 1 [ 633.816254][ T977] usb 9-1: config 2 has no interface number 2 [ 633.822406][ T977] usb 9-1: config 2 interface 192 altsetting 7 endpoint 0x1 has an invalid bInterval 93, changing to 10 [ 633.833786][ T977] usb 9-1: config 2 interface 192 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 633.845868][ T977] usb 9-1: config 2 interface 192 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 633.858072][ T977] usb 9-1: config 2 interface 192 altsetting 7 has a duplicate endpoint with address 0x82, skipping [ 633.869289][ T977] usb 9-1: config 2 interface 192 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 633.880834][ T977] usb 9-1: config 2 interface 192 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 633.892646][ T977] usb 9-1: config 2 interface 43 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 633.903511][ T977] usb 9-1: config 2 interface 43 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 633.914328][ T977] usb 9-1: config 2 interface 43 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 633.926409][ T977] usb 9-1: config 2 interface 43 altsetting 6 endpoint 0xF has invalid wMaxPacketSize 0 [ 633.938855][ T977] usb 9-1: config 2 interface 29 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 633.952975][ T977] usb 9-1: config 2 interface 29 altsetting 9 endpoint 0x5 has an invalid bInterval 111, changing to 10 [ 633.968258][ T977] usb 9-1: config 2 interface 29 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 633.979266][ T977] usb 9-1: config 2 interface 29 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 633.997442][ T977] usb 9-1: config 2 interface 29 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 634.009243][ T977] usb 9-1: config 2 interface 29 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 634.024238][ T977] usb 9-1: config 2 interface 192 has no altsetting 0 [ 634.031194][ T977] usb 9-1: config 2 interface 43 has no altsetting 0 [ 634.038258][ T977] usb 9-1: config 2 interface 29 has no altsetting 0 [ 634.049516][ T977] usb 9-1: New USB device found, idVendor=1199, idProduct=6839, bcdDevice=43.6e [ 634.058880][ T977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.067065][ T977] usb 9-1: Product: syz [ 634.071443][ T977] usb 9-1: Manufacturer: Ь [ 634.076056][ T977] usb 9-1: SerialNumber: syz [ 634.230902][T12844] FAULT_INJECTION: forcing a failure. [ 634.230902][T12844] name failslab, interval 1, probability 0, space 0, times 0 [ 634.245607][T12844] CPU: 1 UID: 0 PID: 12844 Comm: syz.5.1769 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 634.245633][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.245644][T12844] Call Trace: [ 634.245652][T12844] [ 634.245659][T12844] dump_stack_lvl+0x189/0x250 [ 634.245686][T12844] ? __pfx____ratelimit+0x10/0x10 [ 634.245707][T12844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.245727][T12844] ? __pfx__printk+0x10/0x10 [ 634.245752][T12844] ? __pfx___might_resched+0x10/0x10 [ 634.245779][T12844] should_fail_ex+0x414/0x560 [ 634.245805][T12844] should_failslab+0xa8/0x100 [ 634.245828][T12844] kmem_cache_alloc_noprof+0x73/0x3c0 [ 634.245845][T12844] ? ptlock_alloc+0x20/0x70 [ 634.245857][T12844] ptlock_alloc+0x20/0x70 [ 634.245866][T12844] pte_alloc_one+0x7d/0x170 [ 634.245878][T12844] __pte_alloc+0x25/0x1a0 [ 634.245902][T12844] __handle_mm_fault+0x4b8a/0x5620 [ 634.245950][T12844] ? __pfx___handle_mm_fault+0x10/0x10 [ 634.245998][T12844] ? __pfx___might_resched+0x10/0x10 [ 634.246023][T12844] handle_mm_fault+0x2d5/0x7f0 [ 634.246049][T12844] ? vma_is_secretmem+0xd/0x50 [ 634.246076][T12844] __get_user_pages+0x1af4/0x30b0 [ 634.246142][T12844] ? __pfx___get_user_pages+0x10/0x10 [ 634.246164][T12844] get_user_pages_remote+0x2f9/0xaa0 [ 634.246185][T12844] ? __pfx_get_user_pages_remote+0x10/0x10 [ 634.246198][T12844] ? down_read+0x1ad/0x2e0 [ 634.246221][T12844] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 634.246249][T12844] get_arg_page+0x104/0x330 [ 634.246279][T12844] ? __pfx_get_arg_page+0x10/0x10 [ 634.246302][T12844] ? create_init_stack_vma+0x523/0x680 [ 634.246321][T12844] copy_string_kernel+0x191/0x2a0 [ 634.246339][T12844] do_execveat_common+0x3c5/0x6a0 [ 634.246358][T12844] __x64_sys_execveat+0xc4/0xe0 [ 634.246391][T12844] do_syscall_64+0xfa/0x3b0 [ 634.246415][T12844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.246434][T12844] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 634.246448][T12844] ? clear_bhb_loop+0x60/0xb0 [ 634.246460][T12844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.246470][T12844] RIP: 0033:0x7f9f5ef8ebe9 [ 634.246480][T12844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.246489][T12844] RSP: 002b:00007f9f5fd8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 634.246501][T12844] RAX: ffffffffffffffda RBX: 00007f9f5f1b5fa0 RCX: 00007f9f5ef8ebe9 [ 634.246515][T12844] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 634.246527][T12844] RBP: 00007f9f5fd8d090 R08: 0000000000001000 R09: 0000000000000000 [ 634.246540][T12844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 634.246552][T12844] R13: 00007f9f5f1b6038 R14: 00007f9f5f1b5fa0 R15: 00007ffd69e36ba8 [ 634.246585][T12844] [ 634.611657][ T977] sierra 9-1:2.192: Sierra USB modem converter detected [ 634.694439][ T977] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 634.787287][ T977] usb 9-1: Sierra USB modem converter now attached to ttyUSB1 [ 634.840985][ T977] usb 9-1: Sierra USB modem converter now attached to ttyUSB2 [ 634.922948][ T977] sierra 9-1:2.43: Sierra USB modem converter detected [ 635.087333][T12858] xt_recent: hitcount (1048576) is larger than allowed maximum (65535) [ 635.889537][ T977] usb 9-1: Sierra USB modem converter now attached to ttyUSB3 [ 636.054444][ T977] sierra 9-1:2.29: Sierra USB modem converter detected [ 636.120530][ T977] usb 9-1: Sierra USB modem converter now attached to ttyUSB4 [ 636.297123][ T977] usb 9-1: USB disconnect, device number 22 [ 636.353825][ T977] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 636.460194][ T977] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 636.471963][ T977] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 636.496028][ T977] sierra 9-1:2.192: device disconnected [ 637.408563][ T977] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 637.486803][ T5840] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 637.533671][ T977] sierra 9-1:2.43: device disconnected [ 637.567361][ T977] sierra ttyUSB4: Sierra USB modem converter now disconnected from ttyUSB4 [ 637.585279][ T977] sierra 9-1:2.29: device disconnected [ 637.690549][T12893] FAULT_INJECTION: forcing a failure. [ 637.690549][T12893] name failslab, interval 1, probability 0, space 0, times 0 [ 637.731090][ T5840] usb 6-1: unable to get BOS descriptor or descriptor too short [ 637.748751][T12893] CPU: 1 UID: 0 PID: 12893 Comm: syz.6.1783 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 637.748776][T12893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.748787][T12893] Call Trace: [ 637.748795][T12893] [ 637.748804][T12893] dump_stack_lvl+0x189/0x250 [ 637.748830][T12893] ? __pfx____ratelimit+0x10/0x10 [ 637.748852][T12893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.748874][T12893] ? __pfx__printk+0x10/0x10 [ 637.748903][T12893] ? __pfx___might_resched+0x10/0x10 [ 637.748924][T12893] ? fs_reclaim_acquire+0x7d/0x100 [ 637.748952][T12893] should_fail_ex+0x414/0x560 [ 637.748979][T12893] should_failslab+0xa8/0x100 [ 637.749002][T12893] kmem_cache_alloc_noprof+0x73/0x3c0 [ 637.749020][T12893] ? __anon_vma_prepare+0xcb/0x4a0 [ 637.749046][T12893] __anon_vma_prepare+0xcb/0x4a0 [ 637.749066][T12893] ? __pte_alloc+0x15e/0x1a0 [ 637.749092][T12893] __handle_mm_fault+0x4d02/0x5620 [ 637.749143][T12893] ? __pfx___handle_mm_fault+0x10/0x10 [ 637.749193][T12893] ? __pfx___might_resched+0x10/0x10 [ 637.749218][T12893] handle_mm_fault+0x2d5/0x7f0 [ 637.749248][T12893] ? vma_is_secretmem+0xd/0x50 [ 637.749277][T12893] __get_user_pages+0x1af4/0x30b0 [ 637.749343][T12893] ? __pfx___get_user_pages+0x10/0x10 [ 637.749381][T12893] get_user_pages_remote+0x2f9/0xaa0 [ 637.749420][T12893] ? __pfx_get_user_pages_remote+0x10/0x10 [ 637.749444][T12893] ? down_read+0x1ad/0x2e0 [ 637.749469][T12893] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 637.749495][T12893] get_arg_page+0x104/0x330 [ 637.749526][T12893] ? __pfx_get_arg_page+0x10/0x10 [ 637.749561][T12893] ? create_init_stack_vma+0x523/0x680 [ 637.749583][T12893] copy_string_kernel+0x191/0x2a0 [ 637.749601][T12893] do_execveat_common+0x3c5/0x6a0 [ 637.749617][T12893] __x64_sys_execveat+0xc4/0xe0 [ 637.749635][T12893] do_syscall_64+0xfa/0x3b0 [ 637.749646][T12893] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.749656][T12893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.749666][T12893] ? clear_bhb_loop+0x60/0xb0 [ 637.749682][T12893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.749691][T12893] RIP: 0033:0x7fbe9eb8ebe9 [ 637.749702][T12893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.749710][T12893] RSP: 002b:00007fbe9f920038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 637.749722][T12893] RAX: ffffffffffffffda RBX: 00007fbe9edb5fa0 RCX: 00007fbe9eb8ebe9 [ 637.749729][T12893] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 637.749736][T12893] RBP: 00007fbe9f920090 R08: 0000000000001000 R09: 0000000000000000 [ 637.749742][T12893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 637.749749][T12893] R13: 00007fbe9edb6038 R14: 00007fbe9edb5fa0 R15: 00007ffe0630b728 [ 637.749766][T12893] [ 637.751778][ T5840] usb 6-1: not running at top speed; connect to a high speed hub [ 638.116655][ T5840] usb 6-1: config 1 has an invalid interface number: 7 but max is 2 [ 638.124950][ T5840] usb 6-1: config 1 has no interface number 0 [ 638.131877][ T5840] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 638.145934][ T5840] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 638.157668][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.168987][ T5840] usb 6-1: Product: syz [ 638.174336][ T5840] usb 6-1: Manufacturer: syz [ 638.179246][ T5840] usb 6-1: SerialNumber: syz [ 638.190457][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1785'. [ 638.199391][T12898] netlink: 'syz.6.1785': attribute type 5 has an invalid length. [ 638.214527][T12898] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1785'. [ 638.249677][T12898] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 638.261482][T12898] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 638.293209][T12898] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 638.322105][T12898] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 638.331709][T12898] geneve3: entered promiscuous mode [ 638.337930][T12898] geneve3: entered allmulticast mode [ 638.573256][ T977] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 638.791181][T12911] netlink: 'syz.6.1787': attribute type 3 has an invalid length. [ 638.799559][T12911] netlink: 'syz.6.1787': attribute type 3 has an invalid length. [ 638.816013][T12911] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1787'. [ 638.866589][ T977] usb 8-1: Using ep0 maxpacket: 8 [ 639.045746][ T977] usb 8-1: unable to get BOS descriptor or descriptor too short [ 639.113005][ T977] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 639.138985][ T977] usb 8-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 639.173642][ T977] usb 8-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 639.189849][ T5840] usb 6-1: USB disconnect, device number 31 [ 639.215809][ T977] usb 8-1: config 4 has no interface number 0 [ 639.240027][ T977] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 639.251693][T12914] netlink: 'syz.4.1788': attribute type 3 has an invalid length. [ 639.269340][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.269392][T12914] netlink: 'syz.4.1788': attribute type 3 has an invalid length. [ 639.292299][ T977] usb 8-1: Product: syz [ 639.297780][ T977] usb 8-1: Manufacturer: syz [ 639.302400][ T977] usb 8-1: SerialNumber: syz [ 639.322983][T12914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1788'. [ 639.399958][T12916] netlink: 'syz.8.1789': attribute type 10 has an invalid length. [ 639.409155][T12916] syz_tun: entered promiscuous mode [ 639.431544][T12916] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 639.527935][ T977] usb 8-1: Found UVC 0.02 device syz (04f2:b746) [ 639.543148][ T977] usb 8-1: No valid video chain found. [ 639.559156][ T977] usb 8-1: USB disconnect, device number 25 [ 640.242012][T12941] FAULT_INJECTION: forcing a failure. [ 640.242012][T12941] name failslab, interval 1, probability 0, space 0, times 0 [ 640.249463][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1796'. [ 640.258574][T12941] CPU: 0 UID: 0 PID: 12941 Comm: syz.5.1795 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 640.258599][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.258611][T12941] Call Trace: [ 640.258619][T12941] [ 640.258627][T12941] dump_stack_lvl+0x189/0x250 [ 640.258653][T12941] ? __pfx____ratelimit+0x10/0x10 [ 640.258672][T12941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.258693][T12941] ? __pfx__printk+0x10/0x10 [ 640.258720][T12941] ? __pfx___might_resched+0x10/0x10 [ 640.258740][T12941] ? fs_reclaim_acquire+0x7d/0x100 [ 640.258767][T12941] should_fail_ex+0x414/0x560 [ 640.258792][T12941] should_failslab+0xa8/0x100 [ 640.258814][T12941] kmem_cache_alloc_noprof+0x73/0x3c0 [ 640.258832][T12941] ? __anon_vma_prepare+0x117/0x4a0 [ 640.258856][T12941] __anon_vma_prepare+0x117/0x4a0 [ 640.258875][T12941] ? __pte_alloc+0x15e/0x1a0 [ 640.258901][T12941] __handle_mm_fault+0x4d02/0x5620 [ 640.258949][T12941] ? __pfx___handle_mm_fault+0x10/0x10 [ 640.258998][T12941] ? __pfx___might_resched+0x10/0x10 [ 640.259022][T12941] handle_mm_fault+0x2d5/0x7f0 [ 640.259050][T12941] ? vma_is_secretmem+0xd/0x50 [ 640.259079][T12941] __get_user_pages+0x1af4/0x30b0 [ 640.259141][T12941] ? __pfx___get_user_pages+0x10/0x10 [ 640.259178][T12941] get_user_pages_remote+0x2f9/0xaa0 [ 640.259215][T12941] ? __pfx_get_user_pages_remote+0x10/0x10 [ 640.259240][T12941] ? down_read+0x1ad/0x2e0 [ 640.259265][T12941] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 640.259292][T12941] get_arg_page+0x104/0x330 [ 640.259320][T12941] ? __pfx_get_arg_page+0x10/0x10 [ 640.259350][T12941] ? create_init_stack_vma+0x523/0x680 [ 640.259385][T12941] copy_string_kernel+0x191/0x2a0 [ 640.259417][T12941] do_execveat_common+0x3c5/0x6a0 [ 640.259447][T12941] __x64_sys_execveat+0xc4/0xe0 [ 640.259479][T12941] do_syscall_64+0xfa/0x3b0 [ 640.259498][T12941] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.259518][T12941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.259536][T12941] ? clear_bhb_loop+0x60/0xb0 [ 640.259558][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.259582][T12941] RIP: 0033:0x7f9f5ef8ebe9 [ 640.259598][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.259614][T12941] RSP: 002b:00007f9f5fd8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 640.259633][T12941] RAX: ffffffffffffffda RBX: 00007f9f5f1b5fa0 RCX: 00007f9f5ef8ebe9 [ 640.259647][T12941] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 640.259660][T12941] RBP: 00007f9f5fd8d090 R08: 0000000000001000 R09: 0000000000000000 [ 640.259672][T12941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 640.259683][T12941] R13: 00007f9f5f1b6038 R14: 00007f9f5f1b5fa0 R15: 00007ffd69e36ba8 [ 640.259714][T12941] [ 640.721170][T12958] netlink: 'syz.6.1801': attribute type 10 has an invalid length. [ 640.739736][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.747192][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.820859][T12958] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.828025][T12958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.835392][T12958] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.842457][T12958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.901823][T12958] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 641.953168][T12970] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1804'. [ 642.256748][T12975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.273931][T12975] loop9: detected capacity change from 0 to 7 [ 642.287264][T12975] Dev loop9: unable to read RDB block 7 [ 642.292841][T12975] loop9: AHDI p1 p2 p3 [ 642.297022][T12975] loop9: partition table partially beyond EOD, truncated [ 642.304095][T12975] loop9: p1 start 1601398130 is beyond EOD, truncated [ 642.310843][T12975] loop9: p2 start 1702059890 is beyond EOD, truncated [ 642.477846][T12983] netlink: 2088 bytes leftover after parsing attributes in process `syz.8.1807'. [ 643.067165][T12999] netlink: 'syz.7.1813': attribute type 2 has an invalid length. [ 643.252241][T12999] netlink: 'syz.7.1813': attribute type 1 has an invalid length. [ 643.305208][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1813'. [ 643.913244][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 645.134124][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1821'. [ 645.346984][T13036] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1823'. [ 645.714201][T13041] netlink: 'syz.8.1823': attribute type 10 has an invalid length. [ 645.738293][T13041] team0: Device hsr_slave_0 failed to register rx_handler [ 646.333669][T13047] netlink: 2088 bytes leftover after parsing attributes in process `syz.6.1825'. [ 647.172859][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1830'. [ 647.191883][T13063] veth1_macvtap: left promiscuous mode [ 647.506138][T13068] fuse: Unknown parameter 'ÿü1ÿÿšÿ¿00000000000000000000' [ 647.813520][T13079] usb usb1: check_ctrlrecip: process 13079 (syz.5.1834) requesting ep 01 but needs 81 [ 647.823789][T13079] usb usb1: usbfs: process 13079 (syz.5.1834) did not claim interface 0 before use [ 647.914619][T13075] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1832'. [ 649.963209][ T977] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 650.183338][ T977] usb 9-1: Using ep0 maxpacket: 32 [ 650.202525][ T977] usb 9-1: config 0 has an invalid interface number: 230 but max is 0 [ 650.231792][ T977] usb 9-1: config 0 has no interface number 0 [ 650.243232][ T977] usb 9-1: config 0 interface 230 has no altsetting 0 [ 650.260878][ T977] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 650.282182][ T977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.300251][ T977] usb 9-1: Product: syz [ 650.312576][ T977] usb 9-1: Manufacturer: syz [ 650.317436][ T977] usb 9-1: SerialNumber: syz [ 650.333551][ T977] usb 9-1: config 0 descriptor?? [ 650.378553][ T977] ums-usbat 9-1:0.230: USB Mass Storage device detected [ 650.479232][ T977] ums-usbat 9-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 650.592740][T13112] x_tables: ip_tables: ah match: only valid for protocol 51 [ 650.632374][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 650.632393][ T30] audit: type=1326 audit(2000000534.719:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.5.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5ef8ebe9 code=0x7ffc0000 [ 650.740875][ T977] ums-usbat 9-1:0.230: probe with driver ums-usbat failed with error -5 [ 650.772124][ T977] usb 9-1: USB disconnect, device number 23 [ 650.780763][ T30] audit: type=1326 audit(2000000534.719:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.5.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5ef8ebe9 code=0x7ffc0000 [ 650.816249][ T30] audit: type=1326 audit(2000000534.809:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.5.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f9f5ef8ebe9 code=0x7ffc0000 [ 650.848287][ T30] audit: type=1326 audit(2000000534.809:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.5.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5ef8ebe9 code=0x7ffc0000 [ 650.872306][ T30] audit: type=1326 audit(2000000534.809:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.5.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5ef8ebe9 code=0x7ffc0000 [ 650.895854][T13129] loop7: detected capacity change from 0 to 524255231 [ 650.908977][ T30] audit: type=1326 audit(2000000534.819:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.5.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f5ef8ebe9 code=0x7ffc0000 [ 650.932768][ T30] audit: type=1326 audit(2000000534.819:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.5.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5ef8ebe9 code=0x7ffc0000 [ 650.955915][ T30] audit: type=1326 audit(2000000534.819:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.5.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5ef8ebe9 code=0x7ffc0000 [ 650.977620][T13129] loop7: detected capacity change from 524255231 to 524287912 [ 650.992433][ T30] audit: type=1326 audit(2000000534.819:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.5.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5ef8ebe9 code=0x7ffc0000 [ 651.017923][ T30] audit: type=1326 audit(2000000534.819:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13126 comm="syz.5.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f5ef8ebe9 code=0x7ffc0000 [ 651.694361][ T9657] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 651.923282][ T9657] usb 8-1: Using ep0 maxpacket: 8 [ 651.934375][ T9657] usb 8-1: unable to get BOS descriptor or descriptor too short [ 651.972138][ T9657] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 651.980984][ T9657] usb 8-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 652.000171][ T9657] usb 8-1: config 4 descriptor has 1 excess byte, ignoring [ 652.013356][ T9657] usb 8-1: config 4 has no interface number 0 [ 652.022285][ T9657] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 652.043793][ T9657] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.053198][ T9657] usb 8-1: Product: syz [ 652.057380][ T9657] usb 8-1: Manufacturer: syz [ 652.065160][ T9657] usb 8-1: SerialNumber: syz [ 652.243271][ T5974] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 652.246654][T13149] netlink: 'syz.5.1854': attribute type 4 has an invalid length. [ 652.487022][ T9657] usb 8-1: Found UVC 0.02 device syz (04f2:b746) [ 652.493997][ T9657] usb 8-1: No valid video chain found. [ 652.502747][ T9657] usb 8-1: USB disconnect, device number 26 [ 652.516138][ T5974] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 652.544033][ T5974] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 653.084437][ T5974] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 653.120140][ T5974] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 653.263987][ T5974] usb 9-1: Manufacturer: syz [ 653.271378][ T5974] usb 9-1: config 0 descriptor?? [ 653.329597][ T5974] igorplugusb 9-1:0.0: endpoint incorrect [ 653.573591][ T5974] usb 9-1: USB disconnect, device number 24 [ 653.967521][T13181] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1865'. [ 654.087168][T13190] netlink: 'syz.5.1866': attribute type 3 has an invalid length. [ 654.096933][T13190] netlink: 'syz.5.1866': attribute type 3 has an invalid length. [ 654.182769][T13192] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1868'. [ 654.399136][T13190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1866'. [ 655.069269][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1871'. [ 655.312206][T13211] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 655.321596][T13211] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 655.463334][ T977] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 656.214273][ T977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.221775][T13217] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1876'. [ 656.227647][ T977] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 656.244661][T13217] ip6gretap0: entered promiscuous mode [ 656.245831][ T977] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 656.250919][T13217] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1876'. [ 656.259515][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.263002][ T977] usb 9-1: config 0 descriptor?? [ 656.393432][ T9657] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 656.557776][ T9657] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 656.569779][ T9657] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.582076][ T9657] usb 8-1: config 0 descriptor?? [ 656.603228][ T5974] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 656.753202][ T5974] usb 6-1: Using ep0 maxpacket: 32 [ 656.760194][ T5974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.770945][ T5974] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.787263][ T5974] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 656.798310][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.806485][ T5974] usb 6-1: Product: syz [ 656.810678][ T5974] usb 6-1: Manufacturer: syz [ 656.816851][ T5974] usb 6-1: SerialNumber: syz [ 656.827812][ T5974] usb 6-1: config 0 descriptor?? [ 656.836033][ T5974] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 657.049928][ T10] usb 6-1: USB disconnect, device number 32 [ 657.214888][ T977] Bluetooth: Can't get state to change to load configuration err [ 657.223571][ T977] Bluetooth: Loading sysconfig file failed [ 657.229521][ T977] ath3k 9-1:0.0: probe with driver ath3k failed with error -16 [ 657.240408][ T9657] usb 8-1: Cannot set MAC address [ 657.243475][ T977] usb 9-1: USB disconnect, device number 25 [ 657.252562][ T9657] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 657.314669][ T9657] usb 8-1: USB disconnect, device number 27 [ 658.561791][T13244] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1885'. [ 658.789354][T13251] netlink: 'syz.6.1884': attribute type 3 has an invalid length. [ 658.797526][T13251] netlink: 'syz.6.1884': attribute type 3 has an invalid length. [ 658.820692][T13251] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1884'. [ 659.156961][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1886'. [ 660.084383][T13243] ALSA: mixer_oss: invalid OSS volume '' [ 660.331463][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1888'. [ 660.689814][T13244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.698528][ T977] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 660.726623][T13244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.770744][T13244] bond0 (unregistering): Released all slaves [ 660.820551][T13250] ipvlan0: entered allmulticast mode [ 660.836564][T13250] veth0_vlan: entered allmulticast mode [ 660.848943][T13257] netlink: 176 bytes leftover after parsing attributes in process `syz.8.1887'. [ 660.877643][T13257] ip6gretap0: entered promiscuous mode [ 660.894604][T13257] netlink: 176 bytes leftover after parsing attributes in process `syz.8.1887'. [ 660.914162][ T977] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 660.933146][ T977] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.003304][ T977] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 661.042463][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.762560][ T977] hub 8-1:4.0: USB hub found [ 662.080781][ T977] hub 8-1:4.0: 2 ports detected [ 662.093235][ T977] usb 8-1: selecting invalid altsetting 1 [ 662.107223][ T977] hub 8-1:4.0: Using single TT (err -22) [ 662.247052][T13274] netlink: 'syz.8.1892': attribute type 3 has an invalid length. [ 662.256011][T13274] netlink: 'syz.8.1892': attribute type 3 has an invalid length. [ 662.298789][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1892'. [ 662.486310][ T977] hub 8-1:4.0: hub_hub_status failed (err = -71) [ 662.494600][ T977] hub 8-1:4.0: config failed, can't get hub status (err -71) [ 662.674052][ T977] usb 8-1: USB disconnect, device number 28 [ 662.986882][T13282] pim6reg: entered allmulticast mode [ 663.180272][T13279] pim6reg: left allmulticast mode [ 663.559365][T13301] netlink: 'syz.4.1901': attribute type 3 has an invalid length. [ 663.568073][T13301] netlink: 'syz.4.1901': attribute type 3 has an invalid length. [ 663.580404][T13301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1901'. [ 663.683712][ T5974] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 663.683823][T13312] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1905'. [ 663.701236][T13312] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1905'. [ 663.894884][T13316] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1902'. [ 663.905173][T13316] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1902'. [ 663.933272][ T5974] usb 9-1: Using ep0 maxpacket: 8 [ 663.956849][ T5974] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.972153][ T5974] usb 9-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 663.991649][ T5974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.030121][ T5974] usb 9-1: config 0 descriptor?? [ 664.400466][T13326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.418958][T13326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.765026][ T5840] usb 9-1: USB disconnect, device number 26 [ 665.666323][T13343] kvm: user requested TSC rate below hardware speed [ 666.337455][T13352] netlink: 'syz.4.1915': attribute type 3 has an invalid length. [ 666.345303][T13352] netlink: 'syz.4.1915': attribute type 3 has an invalid length. [ 666.356936][T13352] __nla_validate_parse: 1 callbacks suppressed [ 666.356947][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1915'. [ 666.447061][T13356] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1917'. [ 666.457145][T13356] ip6gretap0: entered promiscuous mode [ 666.462910][T13356] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1917'. [ 666.606811][ T5974] delete_channel: no stack [ 667.768418][T13385] overlayfs: failed to clone upperpath [ 668.298975][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1927'. [ 668.386216][ T977] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 668.566480][ T977] usb 8-1: Using ep0 maxpacket: 8 [ 668.593582][ T977] usb 8-1: unable to get BOS descriptor or descriptor too short [ 668.608134][ T977] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 668.621732][T13398] netlink: 176 bytes leftover after parsing attributes in process `syz.8.1929'. [ 668.631189][T13398] netlink: 176 bytes leftover after parsing attributes in process `syz.8.1929'. [ 668.649280][ T977] usb 8-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 668.692157][ T977] usb 8-1: config 4 has no interface number 0 [ 668.706557][ T977] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 668.717565][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.728166][ T977] usb 8-1: Product: syz [ 668.732352][ T977] usb 8-1: Manufacturer: syz [ 668.745762][ T977] usb 8-1: SerialNumber: syz [ 668.754396][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1930'. [ 668.802015][T13402] binder: 13401:13402 ioctl c0306201 0 returned -14 [ 668.817113][T13402] binder: 13401:13402 ioctl c018620c 200000000280 returned -1 [ 668.972884][ T977] usb 8-1: USB disconnect, device number 29 [ 669.112580][T13410] netlink: 'syz.5.1934': attribute type 1 has an invalid length. [ 670.490101][T13428] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1937'. [ 670.574062][T13430] pim6reg: entered allmulticast mode [ 670.581347][T13430] pim6reg: left allmulticast mode [ 670.611129][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1941'. [ 670.809456][T13439] netlink: 'syz.7.1939': attribute type 3 has an invalid length. [ 670.817619][T13439] netlink: 'syz.7.1939': attribute type 3 has an invalid length. [ 670.849771][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1939'. [ 670.917199][ T30] kauditd_printk_skb: 352 callbacks suppressed [ 670.917216][ T30] audit: type=1326 audit(2000000555.009:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13444 comm="syz.8.1942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f074ad8ebe9 code=0x0 [ 672.793623][ T5840] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 672.912358][T13468] netlink: 'syz.4.1950': attribute type 3 has an invalid length. [ 672.920220][T13468] netlink: 'syz.4.1950': attribute type 3 has an invalid length. [ 672.931794][T13468] __nla_validate_parse: 1 callbacks suppressed [ 672.931805][T13468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1950'. [ 672.986844][ T5840] usb 9-1: Using ep0 maxpacket: 8 [ 673.017407][ T5840] usb 9-1: unable to get BOS descriptor or descriptor too short [ 673.030619][ T5840] usb 9-1: config 4 has an invalid interface number: 147 but max is 0 [ 673.051365][ T5840] usb 9-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 673.064298][ T5840] usb 9-1: config 4 has no interface number 0 [ 673.086177][T13475] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1953'. [ 673.205087][T13477] netlink: 'syz.5.1951': attribute type 3 has an invalid length. [ 673.212900][T13477] netlink: 'syz.5.1951': attribute type 3 has an invalid length. [ 673.432380][T13477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1951'. [ 673.506868][ T5840] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 673.519127][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.530992][T13478] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1952'. [ 673.544068][ T5840] usb 9-1: Product: syz [ 673.548333][ T5840] usb 9-1: Manufacturer: syz [ 673.555359][ T5840] usb 9-1: SerialNumber: syz [ 673.927465][ T5840] usb 9-1: USB disconnect, device number 27 [ 673.991791][T13483] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 674.008687][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1956'. [ 674.044476][T13483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 674.062834][T13483] bond3: (slave batadv1): Opening slave failed [ 677.067700][T13510] netlink: 'syz.7.1962': attribute type 3 has an invalid length. [ 677.075728][T13510] netlink: 'syz.7.1962': attribute type 3 has an invalid length. [ 677.134312][T13510] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1962'. [ 677.709659][T13524] netlink: 'syz.6.1963': attribute type 3 has an invalid length. [ 677.717938][T13524] netlink: 'syz.6.1963': attribute type 3 has an invalid length. [ 677.741857][T13524] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1963'. [ 678.266563][T13530] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1968'. [ 678.308626][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1968'. [ 678.755513][T13533] overlayfs: failed to resolve './file0': -2 [ 680.301858][T13557] macsec1: entered allmulticast mode [ 680.543558][T13557] bond0: entered allmulticast mode [ 680.585788][T13557] bond0: left allmulticast mode [ 680.740951][T13564] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 681.040304][T13570] loop9: detected capacity change from 0 to 7 [ 681.069927][T13570] Dev loop9: unable to read RDB block 7 [ 681.077593][T13570] loop9: AHDI p2 p3 [ 681.081648][T13570] loop9: partition table partially beyond EOD, truncated [ 681.089566][T13570] loop9: p3 start 335544320 is beyond EOD, truncated [ 681.256678][T13556] macsec1: entered allmulticast mode [ 681.288216][T13556] bond0: entered allmulticast mode [ 681.298386][T13556] bond0: left allmulticast mode [ 681.725440][ T5974] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 681.850654][T13590] syz.8.1983: attempt to access beyond end of device [ 681.850654][T13590] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 681.865953][T13590] syz.8.1983: attempt to access beyond end of device [ 681.865953][T13590] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 681.879519][T13590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 681.890654][T13590] syz.8.1983: attempt to access beyond end of device [ 681.890654][T13590] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 681.910355][T13590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 681.926779][T13590] syz.8.1983: attempt to access beyond end of device [ 681.926779][T13590] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 681.940672][T13590] syz.8.1983: attempt to access beyond end of device [ 681.940672][T13590] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 681.953934][T13590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 681.964671][T13590] syz.8.1983: attempt to access beyond end of device [ 681.964671][T13590] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 681.978452][T13590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 681.991218][T13590] syz.8.1983: attempt to access beyond end of device [ 681.991218][T13590] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 682.004991][T13590] syz.8.1983: attempt to access beyond end of device [ 682.004991][T13590] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 682.018370][T13590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 682.028655][T13590] syz.8.1983: attempt to access beyond end of device [ 682.028655][T13590] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 682.042001][T13590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 682.054189][T13590] syz.8.1983: attempt to access beyond end of device [ 682.054189][T13590] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 682.069630][T13590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 682.079961][T13590] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 682.089563][T13590] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 682.203162][ T5974] usb 8-1: Using ep0 maxpacket: 8 [ 682.216478][ T5974] usb 8-1: unable to get BOS descriptor or descriptor too short [ 682.246689][ T5974] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 682.260567][ T5974] usb 8-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 682.291786][ T5974] usb 8-1: config 4 descriptor has 1 excess byte, ignoring [ 682.315236][ T5974] usb 8-1: config 4 has no interface number 0 [ 682.374310][ T5974] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 682.404615][ T5974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.628016][ T5974] usb 8-1: Product: syz [ 682.883488][ T5974] usb 8-1: Manufacturer: syz [ 682.903411][ T5974] usb 8-1: SerialNumber: syz [ 683.162101][T13606] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1989'. [ 683.166096][ T5974] usb 8-1: Found UVC 0.02 device syz (04f2:b746) [ 683.199069][ T5974] usb 8-1: No valid video chain found. [ 683.220093][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1989'. [ 683.253172][ T5974] usb 8-1: USB disconnect, device number 30 [ 683.333515][T13606] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1989'. [ 685.015927][T13638] netlink: 'syz.5.1996': attribute type 3 has an invalid length. [ 685.023917][T13638] netlink: 'syz.5.1996': attribute type 3 has an invalid length. [ 685.131626][T13638] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1996'. [ 685.267325][T13643] tipc: New replicast peer: 255.255.255.255 [ 685.274752][T13643] tipc: Enabled bearer , priority 10 [ 685.282430][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1999'. [ 685.314489][T13643] IPVS: stopping backup sync thread 13648 ... [ 685.685136][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.693982][T13666] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 685.704896][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.289016][ T9657] tipc: Node number set to 1836384257 [ 686.293207][ T5931] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 686.473469][ T5931] usb 6-1: device descriptor read/64, error -71 [ 687.230744][ T5931] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 687.386356][ T5931] usb 6-1: device descriptor read/64, error -71 [ 687.523652][ T5931] usb usb6-port1: attempt power cycle [ 687.972506][ T5931] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 688.095915][ T5931] usb 6-1: device descriptor read/8, error -71 [ 689.026304][ T5931] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 689.188101][T13708] syz.7.2015 (13708) used greatest stack depth: 16408 bytes left [ 689.286678][T13728] program syz.5.2020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 689.296477][ T5931] usb 6-1: device not accepting address 36, error -71 [ 689.315669][ T5931] usb usb6-port1: unable to enumerate USB device [ 689.356801][T13728] netlink: 'syz.5.2020': attribute type 30 has an invalid length. [ 689.404384][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2020'. [ 689.479614][T13740] tmpfs: Bad value for 'mpol' [ 689.491724][T13740] xt_hashlimit: max too large, truncated to 1048576 [ 689.546650][T13743] xt_connbytes: Forcing CT accounting to be enabled [ 689.553570][T13743] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 689.653491][ T977] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 689.888440][ T977] usb 8-1: Using ep0 maxpacket: 8 [ 689.906531][ T977] usb 8-1: unable to get BOS descriptor or descriptor too short [ 689.918676][ T977] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 689.929481][ T977] usb 8-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 689.943326][ T977] usb 8-1: config 4 descriptor has 1 excess byte, ignoring [ 689.962892][ T977] usb 8-1: config 4 has no interface number 0 [ 689.973353][ T977] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 689.984874][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.999735][ T977] usb 8-1: Product: syz [ 690.016346][ T977] usb 8-1: Manufacturer: syz [ 690.041809][ T977] usb 8-1: SerialNumber: syz [ 690.501996][ T977] usb 8-1: Found UVC 0.02 device syz (04f2:b746) [ 690.508584][ T977] usb 8-1: No valid video chain found. [ 690.522536][ T977] usb 8-1: USB disconnect, device number 31 [ 690.651674][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2031'. [ 690.782363][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2031'. [ 690.792890][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2031'. [ 691.354703][ T30] audit: type=1326 audit(2000000575.449:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13765 comm="syz.7.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652198ebe9 code=0x7ffc0000 [ 691.412195][ T30] audit: type=1326 audit(2000000575.449:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13765 comm="syz.7.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652198ebe9 code=0x7ffc0000 [ 691.434162][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.444478][ T30] audit: type=1326 audit(2000000575.489:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13765 comm="syz.7.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f652198ebe9 code=0x7ffc0000 [ 691.466046][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.501389][ T30] audit: type=1326 audit(2000000575.489:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13765 comm="syz.7.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652198ebe9 code=0x7ffc0000 [ 691.540970][ T30] audit: type=1326 audit(2000000575.489:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13765 comm="syz.7.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652198ebe9 code=0x7ffc0000 [ 691.598822][ T30] audit: type=1326 audit(2000000575.489:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13765 comm="syz.7.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f652198ebe9 code=0x7ffc0000 [ 691.639599][ T30] audit: type=1326 audit(2000000575.489:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13765 comm="syz.7.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652198ebe9 code=0x7ffc0000 [ 691.712041][ T30] audit: type=1326 audit(2000000575.489:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13765 comm="syz.7.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652198ebe9 code=0x7ffc0000 [ 691.733659][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.775625][T13773] tipc: Started in network mode [ 691.780550][T13773] tipc: Node identity ca0c674653b8, cluster identity 4711 [ 691.788089][T13773] tipc: Enabled bearer , priority 0 [ 691.873269][ T5840] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 691.907365][T13770] syzkaller0: entered promiscuous mode [ 691.943343][T13770] syzkaller0: entered allmulticast mode [ 691.979229][T13770] tipc: Resetting bearer [ 692.001480][T13775] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2037'. [ 692.063243][ T5840] usb 8-1: Using ep0 maxpacket: 32 [ 692.081716][T13769] tipc: Resetting bearer [ 692.085507][ T5840] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.101762][ T5840] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 692.141079][ T5840] usb 8-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 692.165562][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.244052][ T5840] usb 8-1: config 0 descriptor?? [ 692.274563][ T5840] usb 8-1: bad CDC descriptors [ 692.624418][ T5840] usb 8-1: USB disconnect, device number 32 [ 693.161305][ T5974] tipc: Node number set to 2578736966 [ 693.470794][T13789] netlink: 'syz.5.2038': attribute type 3 has an invalid length. [ 693.478696][T13789] netlink: 'syz.5.2038': attribute type 3 has an invalid length. [ 694.264580][T13789] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2038'. [ 694.766879][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 694.780466][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 694.817699][T13804] ceph: No mds server is up or the cluster is laggy [ 694.876967][ T9657] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 695.323161][ T9657] usb 8-1: Using ep0 maxpacket: 8 [ 695.331489][ T9657] usb 8-1: unable to get BOS descriptor or descriptor too short [ 695.344325][ T9657] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 695.361856][ T9657] usb 8-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 695.371940][ T9657] usb 8-1: config 4 descriptor has 1 excess byte, ignoring [ 695.380300][ T9657] usb 8-1: config 4 has no interface number 0 [ 695.389014][ T9657] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 695.398418][ T9657] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.406651][ T9657] usb 8-1: Product: syz [ 695.411022][ T9657] usb 8-1: Manufacturer: syz [ 695.415755][ T9657] usb 8-1: SerialNumber: syz [ 695.632679][ T9657] usb 8-1: Found UVC 0.02 device syz (04f2:b746) [ 695.639607][ T9657] usb 8-1: No valid video chain found. [ 695.647287][ T9657] usb 8-1: USB disconnect, device number 33 [ 697.067892][T13769] tipc: Disabling bearer [ 697.088183][T13808] netlink: 'syz.6.2045': attribute type 1 has an invalid length. [ 697.241772][T13821] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2049'. [ 697.575586][T13826] netlink: 'syz.6.2050': attribute type 3 has an invalid length. [ 697.584012][T13826] netlink: 'syz.6.2050': attribute type 3 has an invalid length. [ 697.648909][T13826] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2050'. [ 697.803022][ T5840] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 697.988255][ T5840] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 698.007039][T13797] wg1 speed is unknown, defaulting to 1000 [ 698.012953][ T5840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.034218][ T5840] usb 9-1: config 0 descriptor?? [ 698.181629][ T977] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 698.220879][T13840] netlink: 'syz.6.2055': attribute type 39 has an invalid length. [ 698.280289][ T5840] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 698.428634][ T977] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 698.463129][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.538787][ T977] ums-cypress 6-1:1.0: USB Mass Storage device detected [ 698.730039][ T977] usb 6-1: USB disconnect, device number 37 [ 699.166201][T13860] netlink: 'syz.6.2059': attribute type 3 has an invalid length. [ 699.177340][T13860] netlink: 'syz.6.2059': attribute type 3 has an invalid length. [ 699.362183][T13860] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2059'. [ 699.389457][ T5840] [drm:udl_init] *ERROR* Selecting channel failed [ 699.440929][ T5840] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 699.479345][ T5840] [drm] Initialized udl on minor 2 [ 699.491392][ T5840] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 699.623567][ T5840] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 699.806957][ T5840] usb 9-1: USB disconnect, device number 28 [ 699.827544][ T10] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 699.853752][ T10] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 702.717682][T13918] xt_cgroup: path and classid specified [ 702.733981][T13917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.899769][T13925] overlay: Unknown parameter 'fowner>00000000000000000000' [ 703.297581][T13941] zonefs (nullb0) ERROR: Not a zoned block device [ 703.394342][T13943] Bluetooth: MGMT ver 1.23 [ 703.938400][T13947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.015456][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2084'. [ 704.049398][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2084'. [ 704.640053][T13961] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2090'. [ 705.253579][ T5840] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 705.381136][T13980] netlink: 'syz.7.2092': attribute type 3 has an invalid length. [ 705.389456][T13980] netlink: 'syz.7.2092': attribute type 3 has an invalid length. [ 705.422391][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2092'. [ 705.563387][ T5840] usb 6-1: config index 0 descriptor too short (expected 1060, got 36) [ 705.625298][ T5840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.734922][ T5840] usb 6-1: config 0 has no interfaces? [ 705.787483][ T5840] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 705.801317][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.881748][ T5840] usb 6-1: config 0 descriptor?? [ 706.107548][T13963] wg1 speed is unknown, defaulting to 1000 [ 706.283044][ T5840] usb 6-1: string descriptor 0 read error: -71 [ 706.293732][ T5840] usb 6-1: USB disconnect, device number 38 [ 706.312756][T13988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2095'. [ 706.322605][T13988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2095'. [ 706.903400][ T9657] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 707.156970][ T9657] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.359877][ T9657] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 707.393194][ T9657] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 707.406337][ T9657] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 707.510777][ T9657] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 707.568752][ T9657] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.593106][ T9657] usb 8-1: Product: syz [ 707.603540][ T9657] usb 8-1: Manufacturer: syz [ 707.618611][ T9657] usb 8-1: SerialNumber: syz [ 707.650910][ T9657] usb 8-1: config 0 descriptor?? [ 707.684990][ T9657] garmin_gps 8-1:0.0: Garmin GPS usb/tty converter detected [ 707.711245][ T9657] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 707.756220][ T9657] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 707.889302][ T5840] usb 8-1: USB disconnect, device number 34 [ 707.899426][ T5840] garmin_gps 8-1:0.0: device disconnected [ 708.237664][T14019] fuse: Bad value for 'user_id' [ 708.242588][T14019] fuse: Bad value for 'user_id' [ 708.971695][T14033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2108'. [ 709.282776][T14043] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2111'. [ 710.283469][ T9657] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 710.570046][ T9657] usb 6-1: Using ep0 maxpacket: 16 [ 710.652623][ T9657] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 710.673706][ T9657] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 710.681760][ T9657] usb 6-1: config 0 has no interface number 0 [ 710.691596][T14054] bio_check_eod: 2 callbacks suppressed [ 710.691607][T14054] syz.8.2115: attempt to access beyond end of device [ 710.691607][T14054] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 710.710947][T14054] gfs2: error -5 reading superblock [ 710.735817][ T9657] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 710.757211][ T9657] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.766308][ T9657] usb 6-1: Product: syz [ 710.770604][ T9657] usb 6-1: Manufacturer: syz [ 710.793360][ T9657] usb 6-1: SerialNumber: syz [ 710.810459][ T9657] usb 6-1: config 0 descriptor?? [ 710.836518][ T9657] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 710.845960][ T9657] usb 6-1: No valid video chain found. [ 710.883389][T14061] vlan2: entered promiscuous mode [ 710.893602][T14061] dummy0: entered promiscuous mode [ 710.903939][T14061] vlan2: entered allmulticast mode [ 710.917436][T14065] 9pnet_fd: Insufficient options for proto=fd [ 710.926759][T14061] dummy0: entered allmulticast mode [ 711.040700][ T9657] usb 6-1: USB disconnect, device number 39 [ 711.583200][ T5840] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 711.653168][ T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 711.735774][ T5840] usb 9-1: Using ep0 maxpacket: 16 [ 711.748060][ T5840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.763146][ T5840] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.783326][ T5840] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 711.810773][ T5840] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 711.879417][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 711.928470][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.943249][ T5840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.969829][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 712.096851][ T5840] usb 9-1: config 0 descriptor?? [ 712.125569][ T10] usb 8-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 712.173650][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.190060][ T10] usb 8-1: Product: syz [ 712.201316][ T10] usb 8-1: Manufacturer: syz [ 712.209053][ T10] usb 8-1: SerialNumber: syz [ 712.217584][ T10] usb 8-1: config 0 descriptor?? [ 712.427737][ T10] qmi_wwan 8-1:0.0: probe with driver qmi_wwan failed with error -22 [ 712.469422][ T10] usb 8-1: USB disconnect, device number 35 [ 712.530921][ T5840] microsoft 0003:045E:07DA.000F: unbalanced collection at end of report description [ 712.545474][ T5840] microsoft 0003:045E:07DA.000F: parse failed [ 712.552730][ T5840] microsoft 0003:045E:07DA.000F: probe with driver microsoft failed with error -22 [ 713.193162][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 713.285967][ T8733] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.375391][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 713.378484][ T8733] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.384347][ T10] usb 6-1: config 6 has an invalid interface number: 46 but max is 0 [ 713.433214][ T10] usb 6-1: config 6 has no interface number 0 [ 713.439344][ T10] usb 6-1: config 6 interface 46 has no altsetting 0 [ 713.448607][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=66.9c [ 713.461170][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.470208][ T10] usb 6-1: Product: syz [ 713.483100][ T10] usb 6-1: Manufacturer: syz [ 713.487719][ T10] usb 6-1: SerialNumber: syz [ 713.500742][ T8733] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.626462][ T8733] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.913246][ T8733] bridge_slave_1: left allmulticast mode [ 713.933153][ T8733] bridge_slave_1: left promiscuous mode [ 713.945553][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.000370][ T8733] bridge_slave_0: left allmulticast mode [ 714.027632][ T8733] bridge_slave_0: left promiscuous mode [ 714.048858][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.161940][ T5946] usb 9-1: USB disconnect, device number 29 [ 714.212951][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 714.236553][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 714.247935][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 714.269373][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 714.278417][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 714.812931][ T8733] team0: Port device geneve0 removed [ 715.018802][ T8733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.031537][ T8733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.046343][ T8733] bond0 (unregistering): Released all slaves [ 715.074115][T14096] wg1 speed is unknown, defaulting to 1000 [ 715.097052][ T977] wg1 speed is unknown, defaulting to 1000 [ 715.123706][ T977] syz0: Port: 1 Link DOWN [ 715.984190][T14100] wg1 speed is unknown, defaulting to 1000 [ 716.333300][ T5853] Bluetooth: hci0: command tx timeout [ 716.875389][ T5974] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 717.133547][ T5974] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 717.141791][ T5974] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 717.199805][ T5974] usb 9-1: config 0 interface 0 has no altsetting 0 [ 717.215717][ T5974] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 717.225109][ T5974] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 717.234979][ T5974] usb 9-1: Product: syz [ 717.239830][ T5974] usb 9-1: Manufacturer: syz [ 717.244868][ T5974] usb 9-1: SerialNumber: syz [ 717.252460][ T5974] usb 9-1: config 0 descriptor?? [ 717.259925][ T5974] hub 9-1:0.0: bad descriptor, ignoring hub [ 717.266102][ T5974] hub 9-1:0.0: probe with driver hub failed with error -5 [ 717.277468][ T5974] usb 9-1: selecting invalid altsetting 0 [ 717.515715][ T8733] tipc: Left network mode [ 717.559638][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 717.599499][ T10] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 717.646140][ T10] snd-usb-audio 6-1:6.46: probe with driver snd-usb-audio failed with error -22 [ 717.655508][ T5974] usb 9-1: USB disconnect, device number 30 [ 717.680747][ T10] usb 6-1: USB disconnect, device number 40 [ 717.724357][T14100] chnl_net:caif_netlink_parms(): no params data found [ 717.845544][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2140'. [ 718.430606][ T5853] Bluetooth: hci0: command tx timeout [ 719.004139][T14161] netlink: 'syz.6.2143': attribute type 9 has an invalid length. [ 719.256840][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2146'. [ 719.633446][ T8733] hsr_slave_0: left promiscuous mode [ 719.868054][ T8733] hsr_slave_1: left promiscuous mode [ 719.882008][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.923708][ T8733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.948124][ T8733] veth1_macvtap: left promiscuous mode [ 719.954405][ T8733] veth0_macvtap: left promiscuous mode [ 719.960144][ T8733] veth1_vlan: left promiscuous mode [ 719.965661][ T8733] veth0_vlan: left promiscuous mode [ 720.016158][ T30] audit: type=1326 audit(2000000604.079:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14174 comm="syz.6.2149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe9eb8ebe9 code=0x0 [ 720.303210][ T9657] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 720.473181][ T5853] Bluetooth: hci0: command tx timeout [ 720.519457][ T9657] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 720.528915][ T9657] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 720.550115][ T9657] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 720.587155][ T9657] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 720.623378][ T9657] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 720.754945][ T9657] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 720.768613][ T9657] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 720.780797][T14184] 9p: Unknown uid 00000000004294967295 [ 720.793156][ T9657] usb 6-1: Product: syz [ 720.797374][ T9657] usb 6-1: Manufacturer: syz [ 720.810440][ T9657] cdc_wdm 6-1:1.0: skipping garbage [ 720.815931][ T9657] cdc_wdm 6-1:1.0: skipping garbage [ 720.851539][ T9657] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 720.857683][ T9657] cdc_wdm 6-1:1.0: Unknown control protocol [ 721.057420][ T9657] usb 6-1: USB disconnect, device number 41 [ 721.492822][T14197] netlink: 'syz.5.2152': attribute type 3 has an invalid length. [ 721.501455][T14197] netlink: 'syz.5.2152': attribute type 3 has an invalid length. [ 721.525383][T14197] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2152'. [ 722.563462][ T5853] Bluetooth: hci0: command tx timeout [ 722.924453][ T10] usb 9-1: new low-speed USB device number 31 using dummy_hcd [ 723.103481][ T10] usb 9-1: device descriptor read/64, error -71 [ 723.430052][ T8733] team0 (unregistering): Port device team_slave_1 removed [ 723.437826][T14216] netlink: 'syz.6.2158': attribute type 10 has an invalid length. [ 723.692805][ T8733] team0 (unregistering): Port device team_slave_0 removed [ 724.087258][T14220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.188557][T14100] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.196690][T14100] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.204019][T14100] bridge_slave_0: entered allmulticast mode [ 724.212278][T14100] bridge_slave_0: entered promiscuous mode [ 724.292821][T14216] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 724.321833][T14216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 724.350525][T14100] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.358807][T14100] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.380119][T14100] bridge_slave_1: entered allmulticast mode [ 724.380725][T14222] netlink: 'syz.8.2161': attribute type 3 has an invalid length. [ 724.394245][T14222] netlink: 'syz.8.2161': attribute type 3 has an invalid length. [ 724.394377][T14100] bridge_slave_1: entered promiscuous mode [ 724.406751][T14222] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2161'. [ 725.245862][T14100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.047809][T14100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.068051][T14100] team0: Port device team_slave_0 added [ 727.136331][T14100] team0: Port device team_slave_1 added [ 727.972498][T14100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.994182][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.206167][T14100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.303650][T14100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.341753][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.386679][T14100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.507659][T14266] netlink: 2088 bytes leftover after parsing attributes in process `syz.6.2172'. [ 728.510192][T14265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.551305][T14100] hsr_slave_0: entered promiscuous mode [ 728.678387][T14100] hsr_slave_1: entered promiscuous mode [ 728.689756][T14100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.705650][T14100] Cannot create hsr debugfs directory [ 729.127406][T14100] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 729.141912][T14100] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 729.160207][T14100] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 729.178175][T14100] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 729.490423][T14100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.954809][T14100] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.263388][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.270543][ T8733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.502728][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.509994][ T8733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.322815][T14312] netlink: 'syz.4.2183': attribute type 9 has an invalid length. [ 731.363507][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 731.388028][T14312] hsr0: entered promiscuous mode [ 731.410058][T14312] macvlan2: entered promiscuous mode [ 731.440664][T14312] macvlan2: entered allmulticast mode [ 731.486655][T14312] hsr0: entered allmulticast mode [ 731.491723][T14312] hsr_slave_0: entered allmulticast mode [ 731.513427][T14312] hsr_slave_1: entered allmulticast mode [ 731.707443][T14100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.775206][T14326] netlink: 2088 bytes leftover after parsing attributes in process `syz.8.2186'. [ 731.986726][T14100] veth0_vlan: entered promiscuous mode [ 731.999224][T14100] veth1_vlan: entered promiscuous mode [ 732.037553][T14100] veth0_macvtap: entered promiscuous mode [ 732.047417][T14100] veth1_macvtap: entered promiscuous mode [ 732.065256][T14100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.080580][T14100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.095170][T14100] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.104738][T14100] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.114081][T14100] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.122970][T14100] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.208073][ T8733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.216581][ T8733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.259576][ T8721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.268373][ T8721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.605452][T14342] netlink: 'syz.4.2191': attribute type 3 has an invalid length. [ 732.621017][T14342] netlink: 'syz.4.2191': attribute type 3 has an invalid length. [ 732.630507][ T977] kernel write not supported for file bpf-map (pid: 977 comm: kworker/0:2) [ 732.646669][T14342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2191'. [ 732.786654][ T5974] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 732.996735][ T5974] usb 10-1: Using ep0 maxpacket: 16 [ 733.019911][ T5974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.040271][ T5974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 733.051725][ T5974] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 733.061615][ T5974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.072853][ T5974] usb 10-1: config 0 descriptor?? [ 733.079301][T14339] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 733.780669][ T5974] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.9-1/input0 [ 733.949580][ T5974] corsair 0003:1B1C:1B02.0010: Failed to get K90 initial state (error -71). [ 734.133283][ T5974] usb 10-1: USB disconnect, device number 2 [ 735.636396][T14386] netlink: 2052 bytes leftover after parsing attributes in process `syz.9.2203'. [ 735.646347][T14380] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.665788][T14380] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 735.949374][T14380] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.008733][T14380] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 736.377841][T14380] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.411840][T14380] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 736.510419][T14380] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.522485][T14380] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 736.657783][T14380] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 736.666433][T14380] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 736.688869][T14380] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 736.697114][T14380] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 736.711990][T14380] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 736.720248][T14380] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 736.742165][T14380] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 736.751291][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 736.753153][T14380] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 736.918581][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 736.931555][ T9] usb 10-1: can't read configurations, error -61 [ 736.933149][ T5974] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 737.041307][T14405] netlink: 'syz.6.2209': attribute type 3 has an invalid length. [ 737.049250][T14405] netlink: 'syz.6.2209': attribute type 3 has an invalid length. [ 737.064271][T14405] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2209'. [ 737.083475][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 737.124008][ T5974] usb 6-1: Using ep0 maxpacket: 32 [ 737.308290][ T5974] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 737.315148][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 737.317848][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.337557][ T5974] usb 6-1: Product: syz [ 737.342103][ T5974] usb 6-1: Manufacturer: syz [ 737.342177][ T9] usb 10-1: can't read configurations, error -61 [ 737.354581][ T5974] usb 6-1: SerialNumber: syz [ 737.474642][ T5974] usb 6-1: config 0 descriptor?? [ 737.477454][ T9] usb usb10-port1: attempt power cycle [ 737.563760][ T5974] empeg 6-1:0.0: empeg converter detected [ 737.580056][ T5974] usb 6-1: active config #0 != 1 ?? [ 737.788563][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.935206][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 738.252796][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.260279][ T30] audit: type=1326 audit(2000000621.929:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 738.285020][ T30] audit: type=1326 audit(2000000621.929:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 738.308570][ T30] audit: type=1326 audit(2000000621.939:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 738.333840][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 738.341713][ T9] usb 10-1: can't read configurations, error -61 [ 738.350932][ T30] audit: type=1326 audit(2000000621.939:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 738.373537][ T30] audit: type=1326 audit(2000000621.939:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 738.398404][ T30] audit: type=1326 audit(2000000621.939:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 738.431673][ T30] audit: type=1326 audit(2000000621.939:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 738.473359][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 738.492649][ T30] audit: type=1326 audit(2000000621.949:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 738.608775][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 738.619767][ T30] audit: type=1326 audit(2000000621.959:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 738.643470][ T9] usb 10-1: can't read configurations, error -61 [ 738.681970][ T9] usb usb10-port1: unable to enumerate USB device [ 738.704979][ T30] audit: type=1326 audit(2000000621.959:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f294458ebe9 code=0x7ffc0000 [ 739.374304][T14443] netlink: 'syz.4.2218': attribute type 3 has an invalid length. [ 739.382095][T14443] netlink: 'syz.4.2218': attribute type 3 has an invalid length. [ 739.393950][T14443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2218'. [ 739.423831][T14447] netlink: 2052 bytes leftover after parsing attributes in process `syz.8.2217'. [ 740.524091][T14460] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2222'. [ 740.592574][T14461] netlink: 'syz.9.2222': attribute type 1 has an invalid length. [ 740.601704][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2222'. [ 743.409262][ T5974] usb 6-1: USB disconnect, device number 42 [ 743.409831][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 743.409846][ T30] audit: type=1800 audit(2000000627.499:717): pid=14486 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.2229" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 744.026979][T14496] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2230'. [ 744.306747][T14506] netlink: 'syz.5.2234': attribute type 3 has an invalid length. [ 744.314818][T14506] netlink: 'syz.5.2234': attribute type 3 has an invalid length. [ 744.334090][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2234'. [ 745.678919][T14534] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2243'. [ 745.733753][T14534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.793174][T14109] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 745.954908][T14109] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.977978][T14109] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.011094][T14109] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 746.022303][T14109] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.042150][T14109] usb 9-1: config 0 descriptor?? [ 746.054641][ T5974] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 746.243333][ T5974] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 746.261779][ T5974] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 746.281029][ T5974] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 746.292068][T14550] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 746.301414][ T5974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.335334][T14540] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 746.347174][ T5974] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 746.584613][ T9657] usb 10-1: USB disconnect, device number 7 [ 746.817936][T14109] razer 0003:1532:010E.0011: failed to enable macro keys: -71 [ 746.848170][T14109] razer 0003:1532:010E.0011: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.8-1/input0 [ 746.882709][T14109] usb 9-1: USB disconnect, device number 33 [ 746.889161][T14540] ip6erspan0: entered allmulticast mode [ 747.024164][T14565] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2252'. [ 747.116601][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.123185][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.460268][ T30] audit: type=1326 audit(2000000631.549:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14567 comm="syz.8.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 747.553262][ T30] audit: type=1326 audit(2000000631.549:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14567 comm="syz.8.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 747.588560][ T30] audit: type=1326 audit(2000000631.549:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14567 comm="syz.8.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 747.611388][ T30] audit: type=1326 audit(2000000631.549:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14567 comm="syz.8.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 747.633478][ T30] audit: type=1326 audit(2000000631.549:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14567 comm="syz.8.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 747.682601][ T30] audit: type=1326 audit(2000000631.549:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14567 comm="syz.8.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 747.773298][ T30] audit: type=1326 audit(2000000631.549:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14567 comm="syz.8.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 747.795127][ T30] audit: type=1326 audit(2000000631.549:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14567 comm="syz.8.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x7ffc0000 [ 747.912920][T14582] 9pnet_fd: p9_fd_create_unix (14582): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 749.362469][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2263'. [ 749.455488][T14598] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2263'. [ 750.362231][T14609] kAFS: unparsable volume name [ 750.733789][ T977] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 750.792650][T14630] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2273'. [ 750.903198][ T977] usb 10-1: device descriptor read/64, error -71 [ 751.273424][ T977] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 751.414982][ T977] usb 10-1: device descriptor read/64, error -71 [ 751.525190][ T977] usb usb10-port1: attempt power cycle [ 751.657635][T14640] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2276'. [ 751.903160][ T977] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 751.943953][ T977] usb 10-1: device descriptor read/8, error -71 [ 752.213320][ T977] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 752.292541][ T977] usb 10-1: device descriptor read/8, error -71 [ 752.433608][ T977] usb usb10-port1: unable to enumerate USB device [ 754.877235][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2283'. [ 754.905723][T14687] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 756.225669][ T30] audit: type=1326 audit(2000000639.699:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14690 comm="syz.8.2291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f074ad8ebe9 code=0x0 [ 756.710476][T14709] netlink: 2052 bytes leftover after parsing attributes in process `syz.5.2295'. [ 756.778356][T14710] netlink: 'syz.9.2293': attribute type 3 has an invalid length. [ 756.782013][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2295'. [ 756.795543][T14710] netlink: 'syz.9.2293': attribute type 3 has an invalid length. [ 756.939286][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2293'. [ 757.056902][T14714] netlink: 'syz.6.2296': attribute type 10 has an invalid length. [ 757.064933][T14714] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2296'. [ 757.248505][T14714] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2296'. [ 757.724766][T14718] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2298'. [ 758.188701][T14724] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.216568][T14724] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.399985][T14724] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.470943][T14724] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.835390][T14737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2302'. [ 758.858043][T14724] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.869929][T14724] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.896743][T14738] netlink: 'syz.4.2302': attribute type 10 has an invalid length. [ 758.907964][T14738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2302'. [ 758.978275][T14738] team0: Port device geneve0 added [ 759.015180][T14724] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.043159][T14724] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.380558][T14724] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.420632][T14724] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.454036][T14724] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.486822][T14724] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.563626][T14724] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.584348][T14724] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.615979][T14755] netlink: 2052 bytes leftover after parsing attributes in process `syz.8.2308'. [ 759.622095][T14724] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.633975][T14724] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.973167][ T9657] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 760.718813][ T9657] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 760.727256][ T9657] usb 6-1: config 0 has no interface number 0 [ 760.733504][ T9657] usb 6-1: config 0 interface 98 has no altsetting 0 [ 760.744250][ T9657] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 760.784300][ T9657] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.792421][ T9657] usb 6-1: Product: syz [ 760.796826][ T9657] usb 6-1: Manufacturer: syz [ 760.801487][ T9657] usb 6-1: SerialNumber: syz [ 760.830426][ T9657] usb 6-1: config 0 descriptor?? [ 760.945632][T14779] netlink: 'syz.4.2317': attribute type 3 has an invalid length. [ 760.953568][T14779] netlink: 'syz.4.2317': attribute type 3 has an invalid length. [ 760.965574][T14779] __nla_validate_parse: 3 callbacks suppressed [ 760.965584][T14779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2317'. [ 761.060316][ T9657] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 761.123274][ T5974] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 761.246451][T14788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2320'. [ 761.326550][ T5974] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 761.365991][ T5974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 761.390865][ T5974] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 761.418394][ T5974] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 761.453774][ T5974] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.463117][ T5974] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.492615][ T5974] usb 10-1: config 0 descriptor?? [ 761.736572][ T9657] usb 6-1: reset high-speed USB device number 43 using dummy_hcd [ 761.934699][ T5974] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 762.126422][T14805] netlink: 2052 bytes leftover after parsing attributes in process `syz.4.2325'. [ 762.143333][T14805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2325'. [ 762.168158][T14775] rdma_op ffff88806eb6a9f0 conn xmit_rdma 0000000000000000 [ 762.175234][ T9657] usb 6-1: failed to restore interface 98 altsetting 4 (error=-71) [ 762.183783][ T977] usb 10-1: USB disconnect, device number 12 [ 762.202054][ T9657] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 762.221220][ T9657] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 762.231934][ T5974] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 762.255525][ T5974] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 762.279897][ T9657] usb 6-1: USB disconnect, device number 43 [ 762.778938][T14808] netlink: 'syz.8.2326': attribute type 3 has an invalid length. [ 762.787192][T14808] netlink: 'syz.8.2326': attribute type 3 has an invalid length. [ 762.800379][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2326'. [ 765.752176][T14862] netlink: 10320 bytes leftover after parsing attributes in process `syz.6.2338'. [ 765.795509][T14866] netlink: 2052 bytes leftover after parsing attributes in process `syz.9.2340'. [ 765.825087][T14866] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2340'. [ 766.213964][T14871] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2341'. [ 766.507060][T14876] fuse: Bad value for 'fd' [ 766.681268][T14878] netlink: 'syz.8.2343': attribute type 3 has an invalid length. [ 766.689879][T14878] netlink: 'syz.8.2343': attribute type 3 has an invalid length. [ 766.707859][T14878] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2343'. [ 767.073758][T14876] fuse: Bad value for 'fd' [ 767.168242][T14880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.090674][T14902] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2352'. [ 768.100041][T14902] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2352'. [ 770.209566][T14920] netlink: 2052 bytes leftover after parsing attributes in process `syz.5.2355'. [ 770.219407][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2355'. [ 771.036997][T14925] netlink: 'syz.6.2356': attribute type 1 has an invalid length. [ 771.848612][T14950] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 773.434695][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2368'. [ 773.545298][T14976] ip6tnl1: entered promiscuous mode [ 773.550616][T14976] ip6tnl1: entered allmulticast mode [ 773.577197][ T9657] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 773.894327][ T9657] usb 10-1: Using ep0 maxpacket: 32 [ 773.947652][ T9657] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 773.960230][ T9657] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 773.973173][ T9657] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 773.983174][ T9657] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 774.008452][ T9657] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 774.032334][ T9657] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.143375][ T977] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 774.174476][ T9657] usb 10-1: Product: syz [ 774.178808][ T9657] usb 10-1: Manufacturer: syz [ 774.187542][ T9657] usb 10-1: SerialNumber: syz [ 774.224808][ T9657] usb 10-1: config 0 descriptor?? [ 774.295861][T14985] netlink: 'syz.6.2372': attribute type 3 has an invalid length. [ 774.304886][T14985] netlink: 'syz.6.2372': attribute type 3 has an invalid length. [ 774.339330][T14985] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2372'. [ 774.418338][ T977] usb 9-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 774.456312][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.597302][ T30] audit: type=1326 audit(2000000658.689:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14967 comm="syz.9.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a8b8ebe9 code=0x7ffc0000 [ 775.364549][ T30] audit: type=1326 audit(2000000659.379:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14967 comm="syz.9.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fa9a8b8ebe9 code=0x7ffc0000 [ 775.373995][ T977] usb 9-1: config 0 descriptor?? [ 775.474764][ T30] audit: type=1326 audit(2000000659.379:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14967 comm="syz.9.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a8b8ebe9 code=0x7ffc0000 [ 775.605395][ T977] pwc: Creative Labs Webcam 5 detected. [ 775.636323][ T30] audit: type=1326 audit(2000000659.379:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14967 comm="syz.9.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a8b8ebe9 code=0x7ffc0000 [ 775.756640][ T9] usb 10-1: USB disconnect, device number 13 [ 775.831850][ T977] pwc: Failed to set LED on/off time (-71) [ 775.867336][ T977] pwc: send_video_command error -71 [ 775.883012][ T977] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 776.280451][ T977] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 776.308418][ T977] usb 9-1: USB disconnect, device number 34 [ 776.534556][T15001] netlink: 'syz.6.2377': attribute type 10 has an invalid length. [ 776.582069][T15000] netlink: 'syz.6.2377': attribute type 10 has an invalid length. [ 776.622399][T15001] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2377'. [ 776.652268][T15000] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2377'. [ 776.680496][T15001] ipvlan1: entered promiscuous mode [ 776.694095][T14109] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 776.702009][T15001] ipvlan1: entered allmulticast mode [ 776.712207][T15001] veth0_vlan: entered allmulticast mode [ 776.726634][T15001] bridge0: port 3(ipvlan1) entered blocking state [ 776.737220][T15001] bridge0: port 3(ipvlan1) entered disabled state [ 776.749821][T15001] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 776.767954][T15000] bridge0: port 3(ipvlan1) entered blocking state [ 776.780843][T15000] bridge0: port 3(ipvlan1) entered disabled state [ 776.831071][T15000] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 776.919075][T14109] usb 10-1: New USB device found, idVendor=1fb9, idProduct=0401, bcdDevice=a0.60 [ 776.932948][T14109] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.964143][T14109] usb 10-1: Product: syz [ 776.972831][T14109] usb 10-1: Manufacturer: syz [ 776.991397][T14109] usb 10-1: SerialNumber: syz [ 777.046771][T14109] usb 10-1: config 0 descriptor?? [ 777.059884][T15012] FAULT_INJECTION: forcing a failure. [ 777.059884][T15012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.081205][T14109] cp210x 10-1:0.0: cp210x converter detected [ 777.099889][T15012] CPU: 1 UID: 0 PID: 15012 Comm: syz.6.2380 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 777.099915][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 777.099929][T15012] Call Trace: [ 777.099938][T15012] [ 777.099947][T15012] dump_stack_lvl+0x189/0x250 [ 777.099976][T15012] ? __pfx____ratelimit+0x10/0x10 [ 777.099997][T15012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.100020][T15012] ? __pfx__printk+0x10/0x10 [ 777.100058][T15012] should_fail_ex+0x414/0x560 [ 777.100092][T15012] _copy_to_user+0x31/0xb0 [ 777.100121][T15012] btf_new_fd+0x562/0xc90 [ 777.100154][T15012] ? __pfx_btf_new_fd+0x10/0x10 [ 777.100177][T15012] ? bpf_token_put+0x143/0x160 [ 777.100204][T15012] ? bpf_btf_load+0x126/0x190 [ 777.100226][T15012] __sys_bpf+0x635/0x860 [ 777.100256][T15012] ? __pfx___sys_bpf+0x10/0x10 [ 777.100296][T15012] ? ksys_write+0x22a/0x250 [ 777.100319][T15012] ? __pfx_ksys_write+0x10/0x10 [ 777.100345][T15012] __x64_sys_bpf+0x7c/0x90 [ 777.100372][T15012] do_syscall_64+0xfa/0x3b0 [ 777.100392][T15012] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.100413][T15012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.100433][T15012] ? clear_bhb_loop+0x60/0xb0 [ 777.100457][T15012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.100477][T15012] RIP: 0033:0x7fbe9eb8ebe9 [ 777.100494][T15012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.100512][T15012] RSP: 002b:00007fbe9f920038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 777.100534][T15012] RAX: ffffffffffffffda RBX: 00007fbe9edb5fa0 RCX: 00007fbe9eb8ebe9 [ 777.100550][T15012] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 777.100563][T15012] RBP: 00007fbe9f920090 R08: 0000000000000000 R09: 0000000000000000 [ 777.100576][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 777.100588][T15012] R13: 00007fbe9edb6038 R14: 00007fbe9edb5fa0 R15: 00007ffe0630b728 [ 777.100620][T15012] [ 777.209482][T15013] Invalid ELF section header size [ 779.080563][T14109] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 779.412638][T15022] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 779.427661][T14109] cp210x 10-1:0.0: querying part number failed [ 779.449399][T14109] usb 10-1: cp210x converter now attached to ttyUSB0 [ 779.458817][T14109] usb 10-1: USB disconnect, device number 14 [ 779.468231][T14109] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 779.476746][T14109] cp210x 10-1:0.0: device disconnected [ 779.619031][T15034] program syz.5.2386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 779.686195][T15034] netlink: 'syz.5.2386': attribute type 25 has an invalid length. [ 781.043415][T15042] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2388'. [ 781.246911][ T5945] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 781.586238][ T5945] usb 9-1: Using ep0 maxpacket: 32 [ 781.604557][ T5945] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 781.633118][ T5945] usb 9-1: config 0 has no interface number 0 [ 781.644986][ T5945] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 781.658564][ T5945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.674194][T15048] FAULT_INJECTION: forcing a failure. [ 781.674194][T15048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.677224][ T5945] usb 9-1: Product: syz [ 781.701806][ T5945] usb 9-1: Manufacturer: syz [ 781.711955][ T5945] usb 9-1: SerialNumber: syz [ 781.716907][T15048] CPU: 1 UID: 0 PID: 15048 Comm: syz.6.2391 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 781.716932][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.716945][T15048] Call Trace: [ 781.716953][T15048] [ 781.716962][T15048] dump_stack_lvl+0x189/0x250 [ 781.716989][T15048] ? __pfx____ratelimit+0x10/0x10 [ 781.717012][T15048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.717034][T15048] ? __pfx__printk+0x10/0x10 [ 781.717074][T15048] should_fail_ex+0x414/0x560 [ 781.717101][T15048] _copy_to_user+0x31/0xb0 [ 781.717131][T15048] simple_read_from_buffer+0xe1/0x170 [ 781.717158][T15048] proc_fail_nth_read+0x1df/0x250 [ 781.717187][T15048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.717215][T15048] ? rw_verify_area+0x258/0x650 [ 781.717244][T15048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.717271][T15048] vfs_read+0x200/0x980 [ 781.717305][T15048] ? __pfx___mutex_lock+0x10/0x10 [ 781.717329][T15048] ? __pfx_vfs_read+0x10/0x10 [ 781.717360][T15048] ? __fget_files+0x2a/0x420 [ 781.717388][T15048] ? __fget_files+0x3a0/0x420 [ 781.717409][T15048] ? __fget_files+0x2a/0x420 [ 781.717440][T15048] ksys_read+0x145/0x250 [ 781.717461][T15048] ? __pfx_ksys_read+0x10/0x10 [ 781.717485][T15048] ? do_syscall_64+0xbe/0x3b0 [ 781.717512][T15048] do_syscall_64+0xfa/0x3b0 [ 781.717532][T15048] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.717553][T15048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.717573][T15048] ? clear_bhb_loop+0x60/0xb0 [ 781.717598][T15048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.717617][T15048] RIP: 0033:0x7fbe9eb8d5fc [ 781.717635][T15048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 781.717652][T15048] RSP: 002b:00007fbe9f920030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 781.717671][T15048] RAX: ffffffffffffffda RBX: 00007fbe9edb5fa0 RCX: 00007fbe9eb8d5fc [ 781.717685][T15048] RDX: 000000000000000f RSI: 00007fbe9f9200a0 RDI: 0000000000000003 [ 781.717698][T15048] RBP: 00007fbe9f920090 R08: 0000000000000000 R09: 0000000000000000 [ 781.717717][T15048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 781.717728][T15048] R13: 00007fbe9edb6038 R14: 00007fbe9edb5fa0 R15: 00007ffe0630b728 [ 781.717761][T15048] [ 781.784241][T15051] netlink: 'syz.4.2389': attribute type 3 has an invalid length. [ 781.914562][ T5945] usb 9-1: config 0 descriptor?? [ 781.965811][T15054] netlink: 2052 bytes leftover after parsing attributes in process `syz.9.2392'. [ 781.978342][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2392'. [ 782.001629][ T5945] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 782.030151][T15051] netlink: 'syz.4.2389': attribute type 3 has an invalid length. [ 782.044959][T15051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2389'. [ 782.219243][T15029] 9pnet_fd: Insufficient options for proto=fd [ 782.282706][ T5945] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 782.438544][ T5945] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 783.129806][T15070] overlayfs: failed to clone upperpath [ 783.144962][T15070] netlink: 'syz.4.2398': attribute type 32 has an invalid length. [ 783.156808][T15068] [ 783.159157][T15068] ====================================================== [ 783.166174][T15068] WARNING: possible circular locking dependency detected [ 783.172726][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 783.173184][T15068] 6.16.0-syzkaller #0 Not tainted [ 783.173196][T15068] ------------------------------------------------------ [ 783.173206][T15068] syz.5.2397/15068 is trying to acquire lock: [ 783.182210][T15070] (unnamed net_device) (uninitialized): option coupled_control: invalid value (46) [ 783.187026][T15068] ffff888025b3d988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 783.187089][T15068] [ 783.187089][T15068] but task is already holding lock: [ 783.187097][T15068] ffff888025b3da30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 783.236546][T15068] [ 783.236546][T15068] which lock already depends on the new lock. [ 783.236546][T15068] [ 783.246941][T15068] [ 783.246941][T15068] the existing dependency chain (in reverse order) is: [ 783.255946][T15068] [ 783.255946][T15068] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 783.263767][T15068] lock_acquire+0x120/0x360 [ 783.268784][T15068] __mutex_lock+0x182/0xe80 [ 783.273804][T15068] refcount_dec_and_mutex_lock+0x30/0xa0 [ 783.279954][T15068] nbd_config_put+0x2c/0x790 [ 783.285064][T15068] nbd_release+0xfe/0x140 [ 783.289921][T15068] bdev_release+0x533/0x650 [ 783.294943][T15068] blkdev_release+0x15/0x20 [ 783.299963][T15068] __fput+0x449/0xa70 [ 783.304463][T15068] fput_close_sync+0x119/0x200 [ 783.309748][T15068] __x64_sys_close+0x7f/0x110 [ 783.314944][T15068] do_syscall_64+0xfa/0x3b0 [ 783.319961][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.326367][T15068] [ 783.326367][T15068] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 783.334187][T15068] lock_acquire+0x120/0x360 [ 783.339204][T15068] __mutex_lock+0x182/0xe80 [ 783.344223][T15068] __del_gendisk+0x129/0x9e0 [ 783.349333][T15068] del_gendisk+0xe8/0x160 [ 783.354179][T15068] loop_remove+0x42/0xc0 [ 783.358940][T15068] loop_control_ioctl+0x4ac/0x5a0 [ 783.364473][T15068] __se_sys_ioctl+0xfc/0x170 [ 783.369591][T15068] do_syscall_64+0xfa/0x3b0 [ 783.374608][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.381100][T15068] [ 783.381100][T15068] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 783.389527][T15068] validate_chain+0xb9b/0x2140 [ 783.394808][T15068] __lock_acquire+0xab9/0xd20 [ 783.399996][T15068] lock_acquire+0x120/0x360 [ 783.405007][T15068] down_write+0x96/0x1f0 [ 783.409764][T15068] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 783.416019][T15068] nbd_start_device+0x16c/0xac0 [ 783.421405][T15068] nbd_ioctl+0x636/0xeb0 [ 783.426170][T15068] blkdev_ioctl+0x5a8/0x6d0 [ 783.431189][T15068] __se_sys_ioctl+0xfc/0x170 [ 783.436326][T15068] do_syscall_64+0xfa/0x3b0 [ 783.441349][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.447756][T15068] [ 783.447756][T15068] other info that might help us debug this: [ 783.447756][T15068] [ 783.457971][T15068] Chain exists of: [ 783.457971][T15068] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 783.457971][T15068] [ 783.472138][T15068] Possible unsafe locking scenario: [ 783.472138][T15068] [ 783.479575][T15068] CPU0 CPU1 [ 783.484927][T15068] ---- ---- [ 783.490282][T15068] lock(&nbd->config_lock); [ 783.494870][T15068] lock(&disk->open_mutex); [ 783.501976][T15068] lock(&nbd->config_lock); [ 783.509079][T15068] lock(&set->update_nr_hwq_lock); [ 783.514343][T15068] [ 783.514343][T15068] *** DEADLOCK *** [ 783.514343][T15068] [ 783.522482][T15068] 1 lock held by syz.5.2397/15068: [ 783.527583][T15068] #0: ffff888025b3da30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 783.536920][T15068] [ 783.536920][T15068] stack backtrace: [ 783.542801][T15068] CPU: 1 UID: 0 PID: 15068 Comm: syz.5.2397 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 783.542823][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 783.542834][T15068] Call Trace: [ 783.542843][T15068] [ 783.542851][T15068] dump_stack_lvl+0x189/0x250 [ 783.542874][T15068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.542893][T15068] ? __pfx__printk+0x10/0x10 [ 783.542915][T15068] ? print_lock_name+0xde/0x100 [ 783.542936][T15068] print_circular_bug+0x2ee/0x310 [ 783.542958][T15068] check_noncircular+0x134/0x160 [ 783.542980][T15068] validate_chain+0xb9b/0x2140 [ 783.543000][T15068] ? trace_sched_exit_tp+0x38/0x120 [ 783.543025][T15068] ? __schedule+0x16c8/0x4c90 [ 783.543050][T15068] __lock_acquire+0xab9/0xd20 [ 783.543070][T15068] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 783.543092][T15068] lock_acquire+0x120/0x360 [ 783.543107][T15068] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 783.543131][T15068] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 783.543161][T15068] down_write+0x96/0x1f0 [ 783.543181][T15068] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 783.543203][T15068] ? __pfx_down_write+0x10/0x10 [ 783.543223][T15068] ? rcu_is_watching+0x15/0xb0 [ 783.543242][T15068] ? __mutex_lock+0xa6d/0xe80 [ 783.543264][T15068] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 783.543289][T15068] ? nbd_ioctl+0x131/0xeb0 [ 783.543314][T15068] ? __pfx___mutex_lock+0x10/0x10 [ 783.543337][T15068] nbd_start_device+0x16c/0xac0 [ 783.543360][T15068] ? security_capable+0x7e/0x2e0 [ 783.543387][T15068] nbd_ioctl+0x636/0xeb0 [ 783.543414][T15068] ? __pfx_nbd_ioctl+0x10/0x10 [ 783.543438][T15068] ? __asan_memset+0x22/0x50 [ 783.543462][T15068] ? smack_file_ioctl+0x24a/0x340 [ 783.543482][T15068] ? __pfx_smack_file_ioctl+0x10/0x10 [ 783.543502][T15068] ? __pfx_nbd_ioctl+0x10/0x10 [ 783.543527][T15068] blkdev_ioctl+0x5a8/0x6d0 [ 783.543558][T15068] ? __pfx_blkdev_ioctl+0x10/0x10 [ 783.543581][T15068] ? __fget_files+0x2a/0x420 [ 783.543603][T15068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 783.543626][T15068] ? __pfx_blkdev_ioctl+0x10/0x10 [ 783.543648][T15068] __se_sys_ioctl+0xfc/0x170 [ 783.543674][T15068] do_syscall_64+0xfa/0x3b0 [ 783.543693][T15068] ? lockdep_hardirqs_on+0x9c/0x150 [ 783.543710][T15068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.543727][T15068] ? clear_bhb_loop+0x60/0xb0 [ 783.543745][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.543761][T15068] RIP: 0033:0x7f9f5ef8ebe9 [ 783.543777][T15068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.543793][T15068] RSP: 002b:00007f9f5fd6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.543812][T15068] RAX: ffffffffffffffda RBX: 00007f9f5f1b6090 RCX: 00007f9f5ef8ebe9 [ 783.543825][T15068] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 783.543836][T15068] RBP: 00007f9f5f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 783.543848][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.543858][T15068] R13: 00007f9f5f1b6128 R14: 00007f9f5f1b6090 R15: 00007ffd69e36ba8 [ 783.543877][T15068] [ 783.868520][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 783.882401][T15073] netlink: 'syz.9.2394': attribute type 6 has an invalid length. [ 783.887443][ T9657] usb 9-1: USB disconnect, device number 35 [ 783.898518][ T9657] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 783.922343][ T9657] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 783.934162][ T5853] block nbd5: Receive control failed (result -107) [ 783.934832][ T9657] quatech2 9-1:0.51: device disconnected [ 783.949285][T15074] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 783.990516][T15066] block nbd5: shutting down sockets