last executing test programs: 18m56.986093273s ago: executing program 4 (id=920): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x0}) unshare(0x400) (async, rerun: 32) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) bind$rose(r4, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x1c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="8523020000000000200012800b0001006d61637365630000100002800c000100ffff43f5ffffffff08000500", @ANYRES32=r3], 0x48}}, 0x4000010) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x117, 0x2048a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30086, 0x22}}}}}}]}, 0x48}}, 0x24008000) (async, rerun: 64) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) (rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000001240)={0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001280)={0x0, 0x80000, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r8, 0xc01064c1, &(0x7f0000000200)={r7, 0x1, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000240)={{r9}, "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"}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r10, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="02200000a79d6ba77d9a7516cb852533ca07", 0x0, 0xdfd, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 18m56.109041334s ago: executing program 4 (id=924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) unshare(0x28000600) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x100000, 0x71, 0x0, {r1}}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x51, 0x24, 0xe4, 0x40, 0x57c, 0x2200, 0x4629, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfc, 0x0, 0x100, 0x0, [{{0x9, 0x4, 0xfe, 0x1, 0x2, 0x17, 0x44, 0x6a, 0x0, [], [{{0x9, 0x5, 0x6, 0x22}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) readahead(0xffffffffffffffff, 0x7, 0x34) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x800, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x13, 0x6, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6eaa00000000000071104f000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = mq_open(&(0x7f0000000500)='\x00', 0x801, 0xa0, &(0x7f0000000540)={0x6, 0xfffffffffffffffe, 0x4, 0x1d7}) mq_notify(r5, &(0x7f0000000740)={0x0, 0x1b, 0x2, @thr={&(0x7f0000000580)="a217eeeec9b839b73f0855f472754dcd04c2faeaf4e9110c7cd0fb6d0b3f48bae2fe3010a295f32a1ef5d3b3e805a531bc95409b60a55f1754d5baab4264fb5fbf06deeb69", &(0x7f0000000600)="85993c0376c8d673198ee524e10c432003fc5ffd85cef409b3daf7098f93ad780f595a65b01d6ccfa6c69651550cddafc0780427a800e23cf45a9c13478c8864b77643f3ebac11044c7edc22d80525270f445a020c65335ac3253189eb3b3cf7ab8061b71adb5bf805e1f2ee60c9f18255b27687b7c7dcf7546b96826ee1ef4d2c84ff5be16d9b749b7b7e2bde4cc166e20f6794c792a5dbd7f930e176c241e52441aa6bdeb3de81888b500c65f7ec893e536090d1117df386e3fb33400800946ddebb3d415b9f8a1e0e1450727711a927b3a3b2469a22ef621ac0e0f7bc5748a91f072424024372d223ae56ee21c78197"}}) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x4e22, 0x8000, @mcast1, 0x8000}, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, 0xffffffffffffffff, {[0x0, 0x8, 0x0, 0x4, 0xc8, 0x1000, 0xe0c, 0x1]}}, 0x5c) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0xbc, r7, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e85f03c07cfb7eecd266ce2e07bcf0effcffcdb5937acb01"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b819a294157eb0b9d3de05cce9c6b85293467bd96cfd6183"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9da23629b7f603291740b025dd7e328e6c3c08c7c985978f"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r9 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000004c0)=0xa0000) rseq(0x0, 0x0, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4482ed61560e70eb9c00"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x44}}, 0x8000) 18m53.921397313s ago: executing program 4 (id=933): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x882) r1 = syz_io_uring_setup(0x25e5, &(0x7f0000000580)={0x0, 0x3e3a, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64) umount2(0x0, 0x2) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) (async) setreuid(0xee01, 0xee01) (async) mq_unlink(0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000030000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r5 = fsmount(r0, 0x1, 0x81) pwritev(r5, &(0x7f0000000480)=[{&(0x7f0000000400)="217c5680f30ec0d795a5fc7c5959f768ecf32ee1039fb155931e028c1958e28fb8597ae2ef2f067d4421cf22766ca6949ee8b8c14d0f778c33c6dfc70e7d099b6c41fbda8fc50e48f9aaee0eda03de7cf47e2f65c3f2ed310f0920f42383475c281ad5028e5eba268e", 0x69}, {&(0x7f0000000600)="536bdc7ef033ac0fe86ff86ce5a1bd7421b518a1a5357042e91f773205c2db9e85726512048a1cc0653bd91c34f5e5c0ad3d2ffab36758c8a035bb9b7851fa0cf8f6840739ed7d928ae5b270dd4cbb7971d0d066642712f907563db236cbc94576c1057b2e4374ece9235e631f6d0530a4b20ef9d0a88860b9b9025523512a4ea471cfd877f81798728f771f93f17186c4c998cdb87f984216acb718229e2ea608ef64d17543bab97f6a5bfddece5032def19cff20d55e774087945ee1f45a131f59ef371d88282737a6df6410b8900bfe0406a20aa2d3d7df302014697365d105e0f05fe7fc019d97832e07ee0e99d58044bbc84670b949de", 0xf9}, {&(0x7f0000000780)="8dea82bf822f37c87003da9af9d4e3968008c25f408e51aa0ab1c675671d7aac102989830fc7d90c86dbdec5c44f317cb90dc4ea39814287f1ad53bfa4dae4120bd2749adfbbd281bc960fceaa477539211b3bfa07f51473f44a1404a1baf0687f5849645ca678b3e1f976059e1d0090000f6fc39efdcfa6512d78efcdcf8847b16827dccd5c6c1e154f006ce8c015c55de25194860bc69d4cbed263d05510e1ca85c0e00da3413acc254a2245a04af49d19b6", 0xb3}, {&(0x7f0000000840)="0321c2fa3476c8f0b0bfbb51aa592bb9aae938555dbb291dd129428f79880a1712d3aed167a29939a817150adec5710045098eb8ffc6b49a3516fe0e5565fd674911dc3d7df4ab575ac4aceb8af22f77aca7bc7551bce9907c61d18f769c1865bef022eae5c9c9005127b74f2a38cbe623f093c2721385deaaad73eff198001962464e82b66d8bd3972a26a81c9eee18fd3605201216b1910cf31b2cc7981d2718fa9b91999e2c656e04c7b1158f65e373", 0xb1}, {&(0x7f0000000a00)="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", 0x1000}], 0x5, 0x1, 0x9) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async, rerun: 64) io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d01022301090224000100000000090400000221efb00009050202000000400009058201ff"], 0x0) 18m53.571016398s ago: executing program 4 (id=935): unshare(0x2040600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f00000008c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c7379735f696d6d757461626c652c757466383d302c757466383d312c646d61736b3d30303030303030303030303030303030303030303430322c757466383d312c73686f72746e616d653d6d697865642c666d61736b3d3030303030303030303030303030303030303030193035176e6f6e756d7461696c3d302c00"], 0x0, 0x29f, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x58, 0x12, 0x4, 0x70bd27, 0x25dfdbfc, {0x5, 0x7, 0x1, 0x3, {0x4e24, 0x4e20, [0x6, 0x271a, 0x3ff, 0x9], [0x1, 0x1c0000, 0x81, 0x7], 0x0, [0x7, 0x577ae0c]}, 0x7, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xb, 0x1, "f230874e39c6e5"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40841}, 0x4008000) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) move_mount(r9, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x1430, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x137c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "ef628f89367dbdccf504ff69030bdf21c20b1e1de9660b9b9290880d7701161c111985fb94bfbb3f697d7eb2941092e0029b61051319c0db8b9e9b4277bd2bf310e4db2f38"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xaf, 0x4, "46253c9a329f08848925a9122d3f87a8e72ea21843b93f84ec8ebdff45c97b1bae4a62518011ca7a8208676b08cebaf12c16c854df5ee12104f8dec5a9785a8b53910fa0f71ee1f5d55fc6a10b83598bad53658dc3661e575abcd47d5115ddd54b6b38c5bd1b8b512085d81b95abce7f15e9c5a6b8604dec056025073689728575dd89c735a8fccba2b98d37d2ba5948e6d32b815d01c4efc79fb3b8eeb36a70a56f30a6041b1366d93300"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x81\\/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'bpf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^}@[{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/iommu\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4c4e5c32}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_VALUE={0xc2, 0x4, "3250b034f6341a9ca8fd086362a8a529e006a10a852a0a12ef09cb46070000001447cd5aabbcb77dbf28405e44d1bdce910f8e674de59eb5365e829402f94d5326dda1c523e8993980879e247ff70affaa07343bc283014f18e5f56fbf7fa3a7a5207288fc393915c84ec29e728ab663257531c1450f25f8f23f3f8bd0e4a29456ba091d542aa7e262f5688305c0b579aa6305627d6e47c66611bd002829d85778e6aecb1e038dba4a51acd856f9c9b2f5c295df5ad30be5555b4eea4830"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x63, 0x5, "a29650d82249b96f6956db30dbc61f3da7d1c540dfbc8aa132706d82d1dd50f3026a387871cb119cc07944f9369916e368f6148154ef4a78fc01e396354b1f8eb960ae938b5573912485481af97c7bf568a7f2b1266754d0f0c38620e67b58"}, @ETHTOOL_A_BITSET_MASK={0x6d, 0x5, "c75d03ad756ded006d10345d3ef3f6b986fba12313ca96cf8c5ddc919c15b86ccca80d7810f4cce0156778aa329a5c1b77a5fc5346cf76ed808d1721c0ac32afda968bfce38b80195f1c0bdbd304d3cc934c943f034d23bdf408c8649660547f742e6ac49a5d06722e"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1430}, 0x1, 0x0, 0x0, 0x2090}, 0x80) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000280)={@remote, 0x6c, r5}) 18m52.670784775s ago: executing program 4 (id=939): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, 0x1403, 0x400, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nicvf0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) 18m52.57051354s ago: executing program 4 (id=941): syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newtaction={0xfffffffffffffd4f, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gre0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) statfs(&(0x7f0000001140)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000de60018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000004f040007000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa108}, 0x94) 18m52.196298319s ago: executing program 32 (id=941): syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newtaction={0xfffffffffffffd4f, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gre0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) statfs(&(0x7f0000001140)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000de60018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000004f040007000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa108}, 0x94) 15m7.691678156s ago: executing program 3 (id=1674): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x315, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0xc5, 0x70, 0x86, 0x10, 0x22b8, 0x2c64, 0xee6c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x303, 0x1, 0x1, 0x5, 0xf0, 0x0, [{{0x9, 0x4, 0xd5, 0x0, 0xc, 0x24, 0xc5, 0xa7, 0x95, [], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0x0, 0x9, 0xfa}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x7, 0x2, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x3fe2}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x6, 0x1, 0x6, [@generic={0xb7, 0xd, "7f0b6dad0b66d00994f753ea099f73650f47dca15c61c9a272a78ac8ba2f78e10013b22a0ac4f83d4ecbbd8dfbee56167503469d459a7f530e32fa29e02b4556cedc5fadbab331da74ad2951a4077898ca3b26ce39c524c9d2d71c0dbf09bce8cf31019db88d2a5d2c3fc5462a7c5f1dadfcf00938c8f5c36745da70e05f14d3ba0954cae6fc717d18da98726859c141b417c3831a5710493482b83549bd1223a8c031b31ad0894f0cd3722dbd0c5052673bb31634"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0xfc, 0xea, 0x8}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x8, 0x4, 0x81}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0x3, 0xd}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9, 0x4, 0xb6, [@generic={0x3c, 0x30, "f730b1e2a8a325ccdf837d98ce7caf9cdb3bd11800e0299811bc0e575eea1cc4700d50bdb7f03105e1e273bedc5395b7004f372135f866b72423"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x4, 0x4, 0x2, [@generic={0x8d, 0x30, "c9e0d7f6b1ca231a0f49bb0887191d1f6d16f39b4c472e1676ad5e50c8565ed425ddeb16b12d346e0bcdaec2c8710c1da92600a03d22591083287f46f31b30a3695de48b66cdf5ffc8f36a7cf984c43af899d5dd00f6c8bf60872996498935708885d25eab2c284610143d1ab90dc5618166a35a69754946d612d651b95f6907e15a5f1b64a4bd316a2913"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x39f, 0x6, 0x9c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x8, 0x3, 0x4, [@generic={0x39, 0x21, "482bd97d96c10829ccae20abbe946bd9d1aefed7366ea4b0e63ab98d69e6c7ca607b218ea2c180e50d8581a90b1c4d7fa783c8c9fcece2"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x40, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7f}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xe, 0x30, 0x0, [@generic={0xb7, 0x6, "59fa2ae5c76ac6e0378e3f72f4acd0b0fd5c0b9e4a8734b19b5dde627bd877542da53bcebaf4e6df7303e8f17ed526d3efcd270938ebb07fee7aa00953b7737bd121be91d3cf2748935b11b6bbfffbe7dd173ef77b3b9649780c4b6a2e398c1452fe22f8eec0df653aa3e18312abff4a46e4c4a305cda7f4af21f7dba3a6c055b2bbee251114cdb38c42302ef28c9b8ab457a1fd024d282e7e09353d05c2029b787c01b83bd23cf365e36cc6d08d5bd0643ab8fb02"}]}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x201, 0xff, 0x39, 0x1, 0x10, 0x4}, 0x23, &(0x7f0000000b00)={0x5, 0xf, 0x23, 0x3, [@generic={0xb, 0x10, 0xfd14ee504d499937, "eb406ec3823be693"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x3, 0x1ff}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0xccf, 0x0, 0x9}]}, 0x7, [{0x80, &(0x7f0000000b40)=@string={0x80, 0x3, "26dc519265b8d81af8416ac849cd771d200fb7c83eb820d80cd8c6f2749ee63476f6be52c1212107744dffb480dfba8ce65fd84ae09588cafaff6b1f304942beefee90b0daa59e2ad26b66ced2f6be7e7c118f2c730c9db9f19378057fde9adb9466393651d0c6758668a87337478453dc694fc29391a93471cb6134f263"}}, {0x98, &(0x7f0000000bc0)=@string={0x98, 0x3, "ad52cfebfccb6d4e349a168c1ce3cae602a6ec6f1211bda9aa1409d7ce2c5979379da6face4ea08ca19cb4af2622219f1e5374eb13cbc793da9837a85304def0cf6edad7dacfb6da4cc11d6d90f6f41c68ad5e1934d4f7088eee6a0503b08f709a73bc5fa3dd910d2f5561a3b134ac25e643beb83516b13ae77671ebcdbc82820ca2e947475c00ef9d9c3650faf017515cedc6c3ec63"}}, {0xe6, &(0x7f0000000c80)=@string={0xe6, 0x3, "1740cc10eab1db9d15ce39ff6fe5a8822a29b055309ed1ce0fc7d9b73281086d39b4b7cb264210c0cc17096df318efe1469fc98d3818e58b40fb0934e73f46272363ba4acb8313537fa1a1e3114d2b52cd68029d9f25e6d0bf41168fbb5fe7b318a6116e3c1feadb25054527876130d9403224610901449b47f848359b88c1ae688b3edcb8a6e10b2613f394cf54aa5f4fbb93d05e46de91551bc62a433262f1676b154733b3ec06012e43f9ba1f7623ebfff502e13ef89c59e1100cbc9c4f5d96ea92ae2fefa4a0c3fda09ac795e9bece40bcab923e5fe3428468846779b3a3062e8e4a"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x1801}}, {0xbb, &(0x7f0000000dc0)=@string={0xbb, 0x3, "ca9e934fe73f76a9c42b943ae1f8ac8f0c9fa256d8dfa1f0a0f1aed8a424fd4b2407aac58488e0c90d69896f353e4d34750664cb7cfdc0dc24ffda5ac2ac4436ca66605da4795fb9f4492aa6e81e0a1ed1166c7c1b209ed1bda6393c74fd300cbe4444727113093c332b8b7a68d686ec1187445ec0f0614608d8338e16443c3fa13ffe06eab81cb473a61f04b147b8aa73983021b511e4a6e2c61a64ae046e7f7f2de49cce092bb27fc518a66b9a4e33443ae422cd06af16a5"}}, {0x9a, &(0x7f0000000e80)=@string={0x9a, 0x3, "7b79e64444d46509c744953a72faa52dac839109568ebbaf330ee399244e5f4056b2dc7979b479b0d6db14b2d5bb4a45dc9ec08dfb9935e22fe459b29124f526032e63ca28502d682a431049a989c76009d78b1ea37240b6ae51809efb4b142ebac9fd9c959673408dff0ad4c5a6e03212675128b739361efc9c29b1461b7c6594afd7263a10f163407f9459168c94aa22b6229823e2dfb1"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x457}}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) eventfd2(0x2, 0x801) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc2902, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x815) r11 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r13, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=@flushsa={0x250, 0x1c, 0x20, 0x70bd26, 0x25dfdbfc, {0x32}, [@srcaddr={0x14, 0xd, @in=@empty}, @policy={0xac, 0x7, {{@in=@remote, @in=@multicast2, 0x4e24, 0xd, 0x4e21, 0x7, 0x2, 0x10, 0x80, 0x3c, 0x0, r13}, {0x100000000, 0x1000, 0x1, 0x5, 0x7, 0x9, 0x1, 0x1}, {0x1, 0x77, 0x4}, 0x7cf2, 0x6e6bbb, 0x2, 0x0, 0x1}}, @sec_ctx={0x56, 0x8, {0x52, 0x8, 0x1, 0x4, 0x4a, "936091076d1ce4061adb16f0d86df12fb43556093554c78d3a7c2ae95fef538bb1009de048c83385455c581cdecd787ad2c4fc5beac9e631f7eeae3967208c1949a7b0fae2f2249ae32e"}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd29, 0x2f}}, @replay_thresh={0x8, 0xb, 0x4}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2b, 0xfffffffa}}, @algo_comp={0xf9, 0x3, {{'deflate\x00'}, 0x588, "ee577a6e5d51a6072494beeb6999aa3dac711b2549396eb4965b76530a2d6935844d878525f33c53d7752819f9b183be1b5286bffb19cf803c62c4df98ad09876b607f22b3744b19882217180947c7047e4eb0cef6781b07e6462fcc11efb4ad84245c15ba43e4fd9168ff2564c13b982bb682e057427752b008ff10b202f1b088b66de50f2a2cf2005a8519720ecacf0113049b70d8aed4f01fff52b54987d8fd17d64b1738f40ee6c6f08305661652b6"}}]}, 0x250}, 0x1, 0x0, 0x0, 0x10}, 0x8004) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000075cc0020410eff00000000000000090212000103000000090400000094b44500"], 0x0) 15m4.644295663s ago: executing program 3 (id=1695): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xcb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000e40)=[{&(0x7f00000002c0)="9400f63c4bb2a1382b5738b0842a00000000000400000000", 0x18}, {0x0}, {&(0x7f0000000c00)="a037d9b4f37e41beac2b8fcfd99bcb48978f56cdde811c6551e2d2cc815087283d4a6fd47dcfe572a470c8e05f5f87d2d70c21f998d22b3f7605c1d8fbdd5a2f187df66a730f525d646af6e5c1f5a3a07a5165600d732a81e9bdded0888823cf7c8e0c80b99138badcb13ceba959046010940c6597dcb5fdb6427dd17c1ca50a7a0d93647b4ad79be106d700c930e1999da1ffe9904c4244b15932ca74b4111365a32621b19de47247989e1d9849d2e71bce844511c546c504159c057e1096017c", 0xc1}, {&(0x7f0000000f80)="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", 0x169}, {&(0x7f0000000d80)="59e11a47e48ecce7741149c98bbb68f0a27360221069af00d766cde52fbfc80b25fee6ccd59022c09affcde679b2546be11dd0ff981ff8b64c620cf8cf0a03e7b671321d97940bf1d0a42eebf2dd3603d612727d74f1d3fbee0414b5014fc0cfe1b9d6cd48ae07bc0398837c07f77d213f2f05ab0a11d1c44e36f14a3b29d40328782ae570969fd62ec68f935059aea167710c6702fd48fca251a7c6717e9e9c0d57bff1", 0xa4}], 0x5) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) getsockname$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000840)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000400)=""/142, 0x8e}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000d00)=""/70, 0x46}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000880)=""/204, 0xcc}, {&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000a80)=""/142, 0x8e}], 0xa) ioctl$IOCTL_STATUS_ACCEL_DEV(r1, 0x40046103, 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000080), 0x2021049, &(0x7f0000000540)={[], [{@subj_user={'subj_user', 0x3d, 'z>\xd3Tk&pI'}}]}) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000ec0)=""/116, 0x74, 0x0, &(0x7f0000001100)=@llc={0x1a, 0x20, 0x0, 0x5, 0x8, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000002200)='./file1\x00', 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000002240)=ANY=[@ANYBLOB="67e97f44b1ce0da1002f6834fd81e8c469643d", @ANYRESHEX=0x0, @ANYBLOB="6430c793296a96ed2034bb3251ba0717d314c296f93bf90dbbe276435fb2e16c023c86763e3c0a30a0d93f1ec977ff78463abb450ef0845eba201c22a4122ad651319a968977275c316e6f3be5263475c882172f7a064f9c8e2c7bdd209ca8a1"], 0x1, 0x61f3, &(0x7f0000013940)="$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") syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file0\x00', 0x22e0829, 0x0, 0xfc, 0x0, &(0x7f00000003c0)) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 15m3.661254856s ago: executing program 3 (id=1700): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r5, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaae194aabb86600a7935001406f8c5e361000000000000000000000000bbfe8000000000000000000000000000aa000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22e601e68346e81016bd699d1ba2bb885c43bc"], 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0x7}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000580)={[{0xec, 0xffff, 0x7, 0x7d, 0x2, 0x7f, 0xfe, 0x5, 0x0, 0x3b, 0xc4, 0x0, 0x1}, {0x4, 0x3, 0x8, 0x0, 0xfb, 0x7, 0xe, 0x5, 0x1, 0x4, 0x3}, {0x8, 0x5, 0x3, 0x6, 0xfe, 0x2, 0x1, 0xa4, 0xf8, 0x7, 0x40, 0xa, 0x81}], 0x3d}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r7}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x101) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 15m3.539736266s ago: executing program 3 (id=1702): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x8) open_tree(r0, &(0x7f0000000540)='./file0/file0\x00', 0x81801) 15m3.539167186s ago: executing program 3 (id=1703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xc2d01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x3, 0x7f, 0x2, 0x4, 0x9, "fba9e27fdd441da95550c24e58d7116e50701e", 0xa04, 0x5}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000004c0)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x8, 0x81, 0x2, 0x0, 0xfe, 0x3, 0x5, 0xff, 0x40, 0x9, 0x32, 0xfd, 0x0, 0x4, 0x8001, 0xe3, 0x2, 0xfc, 0x8, '\x00', 0xf4, 0x2}) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x3}) 15m3.432402016s ago: executing program 3 (id=1704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x40d, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x100000e00000, 0x1) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000700)) 15m3.001002152s ago: executing program 33 (id=1704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x40d, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x100000e00000, 0x1) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000700)) 9m26.162012842s ago: executing program 0 (id=2767): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0xffff, 0x1}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r2, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c000280080001006ad63e92"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndmidi(&(0x7f0000000480), 0x8, 0x20002) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRESDEC=r9, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRESOCT=0x0, @ANYBLOB="4ea4ad858afd66d08d9d30b13e71cd4707dd17351db13b6e7fd5c3fc0f3c1e42e2220a0b6be7aa418420f33556e379e4334cfdc3308de10684550cae6b6857bae1edce495dd999bdef37bd2da3e99f9800000000", @ANYRES32, @ANYBLOB="9a6870495751ec0c73fa453354644058e2434e05c07994b2ae4e6cf7831eed208aff99ee9fc8e09e8640b0b5a41d3d60fac181a014dc9012000a3ecfcb4ff34affe23f80b17261831c43970f101d88bd166f97056e286056088736647285cefaef23b6", @ANYRES64=0x0, @ANYBLOB="424b9aefa1989cf67e212ab95cfefec9805fc6fc321aa6a43bedab26b045e9ebe8334496bb3b2a3d28e556fc532fd93604765db35d3e092e9e0b24392f6f009b26746e24631ed8ae932cbd41", @ANYRESHEX=r10], 0x14) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000074dca4cc05085f60350b2c5ad0516de7ce0d974b3c02a607267eebfea522c653b48c49b92be27ca2d6c43fbac4fcaa3021678f2075d0835d63", @ANYRES16=r11, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 9m25.962328959s ago: executing program 0 (id=2768): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = timerfd_create(0x0, 0x80800) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r4, &(0x7f00000002c0)={0x7, 0x4d, 0x1}, 0x7) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) prlimit64(r5, 0x1, &(0x7f0000000180)={0xfffffffffffff801, 0x5}, &(0x7f0000000240)) 9m25.755399744s ago: executing program 0 (id=2769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="0200000005000000030000000000000000000000000000000000000022705498000000009dd729474d97ebe88078207aa7ae3e8870fa5150c60da1981ba56a96dac64f280700faff7e7aff9c66ab995484ee3c67a1884fde296c9ec5cb75c7ec8d8403c3d05ee2554b52d3180113602e04d441813802223b248dfee7a6d419daa88e6629b67ffc18175136bd5f3243dd75d184be9fbec67f9da31b85004b02ff3b21ff7dca49474c00d3e7b5ec0327978091b036baf8b76741c493ff48d14a88d81bcbed56085b5d263340fc28aad299f26840d6da45e62c5c00fd35a58e9a7a9b0bfacebdc8117179037cfe56853239825d17cb091b71a74472e1b6aabf676bf2e4f104b0299fd6a9e0439f4a6b13c0328819b3693537a12ea825fcde8e13930f05cba3c7f4709108988816b0d64dc9c0bb961a30eecfec80cb0aea00547d98b5c94a7fa6b36d17bbf4e6b31b8e13b6e129317a1a00cd14766a5d049cc8a0a05064f952a68d742bf4d623f9b8fc8126f8d91ad901a3818e9bf4836b63a5a4e609842f40"], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00') lseek(r4, 0x67, 0x67) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f000022d000/0x400000)=nil, 0x400000, 0x1000009, 0x8012, r6, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mbind(&(0x7f000000e000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x8, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000089b11b82d0c07c6a000000000000000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="9272000056d81fedad9f9537b6000066642ccf66090000006e9941f54a4c70f5be31f3edc9d992b1eeeb0acc97392701b412cc60358248aa1ee0a1030af7a49b5322239799a0fe80466a0df59bc48e8cca3e7b1e058a2639ea", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r10, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) setuid(0xee00) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r11, 0x8927, &(0x7f0000000000)="37c4a5e33a6081f2a3fcc30a2ea92ef80f6427c344d1178a1c43ca4f0000ec67b9f27cd83b08959c0e471c4ae78b9cc4c7603c7a040782f3c379a03019e3bfd92533743c915077dd984784f531853d184c539dcac54ff2e955ba3fd1c00b016be57263b9695d15c56bbfcc195f2becfab2fc273ea8aee645f9062c6ac6c6c02f59935620d42a59a7e285c4e602b45acbf3e1bfd871e98e4f37b281b5e13b55a48e24a9981b78fe161a9de127f5b2c8ae0a12cbc189b6a1f44e298ff0acca36aac1967ea538fb4d8ca3ddf9884b543d868eac5217ad9b6e5c0f7bba6311f4b36020ec81e814f17062e2d5766abba3d757582a9b922b726173db7a852dc7983fdc") 9m25.633553665s ago: executing program 0 (id=2770): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000190001000000000000000000200100000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffbf0000030000000200000000000000000000000000000000000000000000000000000000000000400009000000000000000000000000000000000000000000000084000500ac1414aa0000000000000000000000000000000033000000000000007f0000010000000000000000000000000000000001030000000000000000000000000000ac1e0101000000000000000000000000000000003300000000000000fe800000000000000000000000a7d44b04bf7dc37e"], 0x13c}}, 0x0) 9m25.487537068s ago: executing program 0 (id=2771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)) shutdown(r6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m24.790608067s ago: executing program 0 (id=2772): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) unshare(0x6a040000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x4c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 9m9.22971326s ago: executing program 34 (id=2772): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) unshare(0x6a040000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x4c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 1m25.927111106s ago: executing program 6 (id=4644): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x43, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000077f80000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184a0000010000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000d0a8e0ffffffffff18400000030000000000000000000000181500", @ANYRES32, @ANYBLOB="00000000000000008520000001000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000000a7000000000000000085000000a5000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000850000004b00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x6, 0x14, &(0x7f0000000140)=""/20, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0xff, 0x400}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[{0x2, 0x3, 0xa, 0x5}, {0x2, 0x5, 0x7, 0x2}, {0x1, 0x2, 0x401, 0x8}, {0x1, 0x5, 0x1, 0x5}, {0x4, 0x2, 0x1, 0x1}, {0x2, 0x4, 0x9, 0xa}], 0x10, 0x5}, 0x94) 1m25.824681836s ago: executing program 6 (id=4647): socket$kcm(0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r3}}, 0x30) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 1m25.094904937s ago: executing program 6 (id=4651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x80, 0xfe, 0x5, 0x5, 0x0, 0x0, 0x0, 0xfd, 0x2, 0x0, 0x0, 0xcc}, 0xe) (async) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, r1, 0x0, &(0x7f0000000180)) 1m24.926694371s ago: executing program 6 (id=4653): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x1000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r1, &(0x7f0000000240)='./file0\x00', 0x3400) r3 = open(&(0x7f0000000000)='./file0\x00', 0x402, 0x82) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000280)="dbc7", 0x2}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) r6 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r6, 0x110, 0x6, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0xbb25, 0x101, 0x6, 0x2, 0x6, 0x0, 0x1, {0x0, @in={{0x2, 0x4e22, @loopback}}, 0xed, 0x532, 0x7ff, 0x1}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000580)={r7, @in6={{0xa, 0x4e22, 0x7f, @empty, 0x6876}}}, &(0x7f0000000440)=0x84) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r9, 0x545c, 0x200000000000000) 1m23.979599651s ago: executing program 6 (id=4656): socket$kcm(0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r3}}, 0x30) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 1m23.643922895s ago: executing program 6 (id=4658): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) futex(&(0x7f00000000c0), 0xd, 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0xb, 0x1006, &(0x7f00000014c0)=""/4102, 0x0, 0x1}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x268, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d6c40c}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff08}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb73}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc66}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "511c2b5c16906cab6024e6120e0c03ebcbc6180ddd345cf364828b3e20114dd9ca6cc5d5ba68aaedf806982656e312f22c8334991d03e68436e63c0ff54aa71178f4240bc51c04c18b9de12a187813e9d4d3cae3ae3622a168fbc4545a867e67cfa2ce1e7eed61bf20e4436fbf7b7f7a32b504dcc49fda13ccc1e1e76baf0ec57b97253ebdb331210bfb131418038987fb84ec9c78916367"}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000000000000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000c40300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2e, 0x3, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x15}, @local}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) futex(&(0x7f00000000c0), 0xd, 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0xb, 0x1006, &(0x7f00000014c0)=""/4102, 0x0, 0x1}, 0x94) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) (async) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x268, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d6c40c}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff08}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb73}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc66}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "511c2b5c16906cab6024e6120e0c03ebcbc6180ddd345cf364828b3e20114dd9ca6cc5d5ba68aaedf806982656e312f22c8334991d03e68436e63c0ff54aa71178f4240bc51c04c18b9de12a187813e9d4d3cae3ae3622a168fbc4545a867e67cfa2ce1e7eed61bf20e4436fbf7b7f7a32b504dcc49fda13ccc1e1e76baf0ec57b97253ebdb331210bfb131418038987fb84ec9c78916367"}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x800) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000000000000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000c40300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2e, 0x3, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x15}, @local}, 0x10) (async) 1m23.203477817s ago: executing program 35 (id=4658): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) futex(&(0x7f00000000c0), 0xd, 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0xb, 0x1006, &(0x7f00000014c0)=""/4102, 0x0, 0x1}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x268, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d6c40c}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff08}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb73}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc66}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "511c2b5c16906cab6024e6120e0c03ebcbc6180ddd345cf364828b3e20114dd9ca6cc5d5ba68aaedf806982656e312f22c8334991d03e68436e63c0ff54aa71178f4240bc51c04c18b9de12a187813e9d4d3cae3ae3622a168fbc4545a867e67cfa2ce1e7eed61bf20e4436fbf7b7f7a32b504dcc49fda13ccc1e1e76baf0ec57b97253ebdb331210bfb131418038987fb84ec9c78916367"}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000000000000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000c40300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2e, 0x3, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x15}, @local}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) futex(&(0x7f00000000c0), 0xd, 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0xb, 0x1006, &(0x7f00000014c0)=""/4102, 0x0, 0x1}, 0x94) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) (async) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x268, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d6c40c}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff08}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb73}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc66}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "511c2b5c16906cab6024e6120e0c03ebcbc6180ddd345cf364828b3e20114dd9ca6cc5d5ba68aaedf806982656e312f22c8334991d03e68436e63c0ff54aa71178f4240bc51c04c18b9de12a187813e9d4d3cae3ae3622a168fbc4545a867e67cfa2ce1e7eed61bf20e4436fbf7b7f7a32b504dcc49fda13ccc1e1e76baf0ec57b97253ebdb331210bfb131418038987fb84ec9c78916367"}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x800) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000000000000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000c40300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2e, 0x3, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x15}, @local}, 0x10) (async) 20.172769443s ago: executing program 7 (id=4897): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xffb0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 19.975517479s ago: executing program 7 (id=4899): socket$kcm(0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x40020, &(0x7f0000000480)=ANY=[@ANYBLOB='gid']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r3}}, 0x30) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 18.893631923s ago: executing program 7 (id=4903): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x80, 0x8001, 0x3a75}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0xf0ffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 16.81785578s ago: executing program 7 (id=4907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000010c0)='./file0\x00') syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[], 0xfc, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1879a8ec985b0000003a423fa668abd7d6053f375b0000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b68fc0a6c884d9f9500f33430d663f1d30620fec8ca99033b9ec045002005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r4, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) r6 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x4, 0x10100, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0, 0x40000103, 0x1}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285628, &(0x7f0000000180)={0x3, @win={{0x7f, 0x8000}, 0x9, 0x4, &(0x7f0000000040)={{0x51, 0x7}}, 0x8, 0x0, 0x11}}) io_uring_enter(r6, 0x46f6, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r3, @ANYRES32=r10], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 15.418159858s ago: executing program 7 (id=4912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6gretap0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) write$ppp(r2, &(0x7f0000000580)='Di', 0x2) getpriority(0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64fff000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000040)='./file7\x00', &(0x7f0000000180)='./file1\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 15.323132332s ago: executing program 2 (id=4914): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_socket_connect_nvme_tcp() r3 = socket(0x2, 0x80805, 0x0) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000300)='l3', 0x2}, {&(0x7f0000000880)="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", 0x86f}], 0x3, 0x0, 0x0, 0x20044000}], 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000001940), 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001980), &(0x7f00000019c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40), 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000240)=0x8) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x65, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x6, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x7, 0x24, 0x6, 0x0, 0x0, ',{'}, {0x5, 0x24, 0x0, 0x2dcf}, {0xd, 0x24, 0xf, 0x1, 0xc049, 0xff, 0x3, 0xff}, [@mdlm_detail={0x8, 0x24, 0x13, 0x5, "bf4d0324"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf, 0x1}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x6, 0x5, 0x40, 0x40}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0x91, &(0x7f0000000100)=ANY=[@ANYBLOB="9103c2263b52849adeb5bdd6eca92dbb34f59b786b9438613f27dc17d632af9ecfa21d0bc5558ef046910082812809e31bb0114c5cb7cce9a266ccdf0e2ae8e7a259ff98461dd5cfe78ed00636e7903d0f74c9657d29f791e3c2f29b500d2a34270150e51f57ffe9d840d0f4efab8f0cb8b30c7d933ff1bfc04c000855bd92f47254922d67803b8ff2fc9f00fecd920a2b"]}]}) 14.325468667s ago: executing program 7 (id=4917): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) listen(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r5, 0x0, 0x0}, 0x20) syz_open_dev$video(0x0, 0xc000, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x600000) ioctl$SIOCAX25CTLCON(r7, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$inet6(r6, 0x0, 0x0) socket$inet(0x2, 0x4, 0x729a742e) write$P9_RSTATu(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="930200007d00000005f1000000000000000000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8105b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f64", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f0000000800)={0x1f, 0x37, 0x1, {0x2, 0xf9d, 0xccc9, 0x0, 0x1, '\x00'}}, 0x1f) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x1, 0x40001025, r9, 0x0) 14.284874686s ago: executing program 1 (id=4918): syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="307ddfb9", 0x4}, {&(0x7f0000000340)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610a4d9b534b3aa09618dfc04f5504e30a263ad3fedf0a7381a", 0x3c}], 0x2}}], 0x3, 0x2000c8c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000"], 0xd0}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x54, 0x0, 0x31, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3c}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004044}, 0x40000) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) recvmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000001280)=""/79, 0x4f}], 0x2}, 0xc8b}], 0x1, 0x120, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xac, 0x2d, 0x8c, 0x20, 0xc52, 0x2861, 0x137, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x89, 0x1, 0x2, 0x87, 0x70, 0x2a, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x8, 0x4, 0x4}}, {{0x9, 0x5, 0x8, 0x1, 0x0, 0x8, 0x2, 0x7}}]}}]}}]}}, 0x0) 14.013583628s ago: executing program 36 (id=4917): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) listen(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r5, 0x0, 0x0}, 0x20) syz_open_dev$video(0x0, 0xc000, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x600000) ioctl$SIOCAX25CTLCON(r7, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$inet6(r6, 0x0, 0x0) socket$inet(0x2, 0x4, 0x729a742e) write$P9_RSTATu(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f0000000800)={0x1f, 0x37, 0x1, {0x2, 0xf9d, 0xccc9, 0x0, 0x1, '\x00'}}, 0x1f) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x1, 0x40001025, r9, 0x0) 13.745453808s ago: executing program 2 (id=4924): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000400)=ANY=[@ANYBLOB="757466383d3133726f6469722c726f6469722c696f636861727365742d6d61637475726b6973682c73686f72746e616d653d77696e39352c759a0c5f786c6174653d302c757466383d312c636f6465706167653d3835352c726f6469722c756e695f786c6174653d5a5e6e6f6e756d7461696c3d302cc7e4381542d1757466383d302c00"], 0x3, 0x350, &(0x7f0000000900)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x4, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3, 0x0, 0x0, 0x10000}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000300000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 12.999540651s ago: executing program 2 (id=4925): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}}, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3, 0xfe}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0xfd88}, 0x1, 0x0, 0x0, 0x10044}, 0x1) 12.028309664s ago: executing program 5 (id=4928): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000003002a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 11.111146803s ago: executing program 2 (id=4930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000200)={[0x5, 0x2, 0x4, 0x624c, 0x8, 0xffff, 0x8, 0xd45f, 0x0, 0x5, 0xbe, 0x3c, 0xb, 0x40, 0x8, 0x0, 0x9, 0x0, 0x8, 0x88, 0x7, 0x6, 0xe, 0x78, 0xbc, 0x8, 0x8001, 0xfffffff7, 0x401, 0x1, 0x0, 0x2, 0x2, 0xfffffffc, 0x6, 0x5, 0x7, 0x80, 0xfff, 0x5, 0x2, 0x1, 0x2, 0x3, 0x9, 0xfffffffb, 0x3e54, 0x9, 0xf9a6, 0x500000, 0xf96f, 0x611, 0x9, 0x4, 0x9, 0x6, 0x7, 0x1, 0x2, 0x5, 0x2, 0xffffffff, 0x9, 0x10ad, 0x7a71f027, 0x7ff, 0x8, 0x2, 0x100, 0x100, 0x3, 0x7, 0x0, 0x8, 0x4f9, 0x0, 0x4, 0x7, 0x8, 0x8, 0x7, 0x4, 0xfffff647, 0x3, 0xea5, 0x9, 0x5, 0x9, 0x4, 0xffff, 0x8, 0xb, 0x5b, 0x2, 0xffffffff, 0x8, 0x0, 0x7, 0x0, 0x7f, 0x2236, 0x76372e36, 0x80, 0x9, 0xed, 0x1, 0x100, 0x7, 0x5, 0x9, 0x4, 0x40, 0x12, 0xb4e6, 0xf60, 0x5d0, 0x0, 0x7, 0x8, 0x3, 0x1, 0x100, 0xffffffff, 0x0, 0x78, 0x5, 0x8, 0x10001, 0x80, 0xfff, 0x2, 0x8, 0x6, 0x80000000, 0x7, 0x2, 0x1, 0xf1, 0xffffff64, 0x1, 0x8001, 0xfffffb58, 0x301d, 0xfffffff9, 0x6, 0x6, 0x80, 0x1ed5, 0x1, 0xfffff6f0, 0x7fffffff, 0xffffff80, 0x10, 0xfff, 0x8, 0x5, 0x0, 0x0, 0x80000001, 0x8000, 0x9, 0x0, 0x3, 0x7, 0x1, 0x800, 0x7fffffff, 0x3, 0x5, 0x5, 0x5, 0x4, 0xc, 0x0, 0x1, 0x80000001, 0x7, 0x0, 0xffff, 0x7, 0x4750, 0x3, 0x800, 0x0, 0x8001, 0x10000, 0x8, 0x8, 0x4, 0x3, 0x401, 0x4, 0x794a, 0x1a5, 0x9, 0x435c, 0x1, 0xfffffe00, 0x8, 0x63147eff, 0x8, 0x4, 0x8000, 0xe20, 0x4, 0x2, 0x7fffffff, 0x7, 0x2b48a0b6, 0x7, 0x54, 0x1000, 0x7, 0x3ff, 0x0, 0xebd0, 0x2, 0xf0c, 0x4, 0x1, 0x7, 0x4, 0xffff, 0x0, 0x0, 0x4, 0xc5a, 0x5, 0x1, 0x2, 0x0, 0xa6c, 0x1, 0xb84, 0x55a3, 0xfff, 0x6, 0x1, 0x4, 0x6, 0x6, 0x5561c154, 0x9, 0x1, 0xa, 0x7, 0x7f8, 0x4, 0x3, 0x2291, 0x6f9ad82c, 0x9, 0xffffff80, 0x0, 0x4, 0xffff, 0x9, 0xfffffffd, 0x2, 0x100, 0x8, 0x0, 0x40, 0x80000001, 0x80000001, 0x9, 0x5, 0x8000000, 0x6, 0x7, 0x58, 0x8, 0xfffffff1, 0x8b, 0x3, 0xa304, 0x4, 0x5, 0x0, 0xfb03, 0xffffff00, 0x24, 0x40, 0x0, 0x1d, 0xff39, 0x0, 0x6, 0x3, 0x8, 0x9, 0x800, 0x5, 0x7, 0x401, 0x100, 0x400, 0xfffffff7, 0x40, 0x2, 0xfffffffb, 0x8, 0x9, 0x6, 0x15f, 0x1c, 0x9de3, 0x1000, 0x3, 0x10000, 0x81, 0x6, 0x5, 0x1, 0x473, 0x9, 0xc, 0xdd, 0x8, 0x10001, 0xfffffff5, 0x800, 0x3, 0x5, 0xfc, 0x9, 0x1ff, 0x81, 0x0, 0x1, 0xffffff98, 0x28000000, 0x9, 0x4, 0xb80, 0x2, 0x4, 0x8, 0x4, 0x7, 0x5, 0x0, 0x0, 0x3, 0x10001, 0xd, 0xe7c7, 0x2, 0x0, 0xc, 0x3, 0x10000, 0x7, 0x1, 0xde6, 0xc, 0xdf4a, 0x8000, 0x1, 0xffffffff, 0x22, 0x7, 0x0, 0x101, 0x9, 0xc, 0x2, 0x8d9e, 0x8, 0x80, 0xffffffff, 0x680f, 0x8, 0x1, 0x823, 0x1, 0x0, 0x8001, 0x20d5f88b, 0x23d0e150, 0xffffffff, 0x0, 0xa836, 0x0, 0x2, 0x9, 0x5, 0x3, 0x9, 0xeede, 0x0, 0x8, 0x7, 0x8, 0xc, 0x0, 0x3, 0x8, 0x8, 0x0, 0x8001, 0x4, 0x7, 0xfffffc99, 0x20000000, 0x7a, 0x3, 0x9, 0x8, 0x200, 0x8, 0x9, 0x3, 0x7, 0x3, 0x1, 0x8, 0x2, 0x3, 0x5, 0x2, 0x1, 0x6, 0x200, 0x2, 0x9, 0xffffffec, 0x10000, 0xfffff85a, 0x3, 0xffff, 0xa, 0x4, 0x4, 0x7, 0x5, 0x5, 0x6, 0xffff0001, 0xfffffffc, 0x1, 0x3, 0x8001, 0x9, 0xfff, 0x3, 0x6, 0x677b6570, 0x8001, 0x8, 0xfff, 0xa, 0x2c, 0x2, 0x8, 0x4, 0x71db, 0x2bd36f7d, 0x7, 0xfffffff9, 0x9, 0xf1, 0x2, 0x6c05, 0x9, 0x2, 0x4, 0xe4, 0xc6, 0x390, 0x8000, 0xa, 0x6, 0x4, 0x5, 0x8001, 0x10000, 0x1, 0x9, 0x401, 0x5, 0x2, 0x40, 0x7, 0x8, 0x8, 0xb, 0x2, 0x80, 0x1, 0x5, 0x200, 0xc, 0x8, 0x5, 0xd, 0x1ff, 0x3, 0x2, 0x4d, 0x2, 0x0, 0x80000001, 0xe, 0xd8, 0xf, 0xfbc, 0xfffffffd, 0xfff, 0x9, 0x3, 0x9f6a, 0x1, 0x7, 0x8, 0x3, 0x3, 0x1, 0x1, 0xe, 0x7, 0x0, 0x8000, 0xfffffff7, 0x3, 0x3, 0x2, 0x1, 0x7f, 0x4, 0x40, 0x8b3b, 0x6, 0xfffffffe, 0x9, 0xe9, 0x7, 0x7, 0x81, 0x80, 0x3, 0x17375458, 0x8, 0x2, 0x5, 0x6e6, 0x8, 0xfffffff7, 0x4, 0xffffff01, 0xfe7, 0xffffffff, 0xfff, 0x1, 0x5, 0x0, 0x1, 0x1, 0x48000000, 0x7fffffff, 0x0, 0x3, 0x5, 0x5, 0xffffffb3, 0xfffffff8, 0xfc7c, 0x40, 0x1, 0x40, 0x7, 0x3, 0x8, 0x81, 0xd36c, 0x4, 0xccf, 0xd130, 0x3e, 0x2, 0xffffffff, 0x5, 0xff, 0x5, 0x4, 0x9, 0x80, 0x6, 0x0, 0x4, 0x7f, 0x1, 0x6, 0x6, 0x7, 0x2, 0x7, 0x2, 0x7, 0x3, 0xff, 0x72c00, 0x0, 0x5, 0x40, 0x7f, 0x5, 0xd5, 0x800, 0x9, 0x5, 0x61ce, 0x7, 0x2, 0xaf2, 0xd36, 0x401, 0x8, 0x7, 0x4, 0x400000, 0x1, 0xc752, 0xa, 0x3, 0x15, 0x4, 0x9, 0x80fb, 0x10001, 0x40, 0x80000001, 0x7fffffff, 0xffff, 0x2, 0x7, 0x8, 0x7fff, 0x8, 0x5, 0x80ac, 0x8, 0xabd4, 0x7fffffff, 0x3, 0x1, 0x94, 0x2, 0x1, 0x1, 0xea9, 0x5, 0x4, 0xc2, 0x1, 0xfffffffa, 0x1, 0x9, 0x1, 0x6, 0x2, 0x4, 0x100, 0x3, 0x3, 0x0, 0x800, 0x7, 0x1, 0x96, 0x62, 0xa02, 0x80000001, 0x7, 0xff, 0x8, 0x1, 0xc, 0x7, 0x8000, 0x4, 0x9, 0x2, 0x80000000, 0xf13e4129, 0xe399, 0x2, 0x6, 0x1, 0xb, 0x1, 0x80000000, 0x4, 0x9, 0x0, 0xb4e5, 0x8, 0x8, 0x3, 0x70000, 0x8, 0x3, 0x9, 0xfffffffe, 0x7, 0x8001, 0x9, 0xe, 0xa8, 0xe, 0x6, 0x3, 0x7, 0xee, 0x7, 0xff, 0x7, 0x5, 0x5, 0x78, 0x4, 0x9, 0x6, 0x1, 0x3, 0xf7, 0x3, 0x512d4308, 0xfffffffb, 0x1, 0x0, 0xd, 0xb, 0x8, 0x7, 0x62, 0x0, 0x9, 0x7, 0x4201, 0x3, 0x1, 0x9, 0x425e4a95, 0x4, 0x64b2, 0x80, 0x0, 0x5, 0x6, 0xf7681a7, 0x2, 0xfffffffe, 0x2, 0x9, 0x7b, 0x2, 0x1, 0x9491, 0x4, 0x1, 0xf3d, 0x7fffffff, 0x81, 0x3ff, 0xd70, 0x9, 0x0, 0x3, 0x8f08, 0xe, 0x8, 0xfffffffb, 0x0, 0x400, 0x6, 0x81, 0xfffffffb, 0x7, 0x0, 0x6365, 0xf000000, 0x8, 0xee98, 0x16c, 0x7, 0xbb, 0x4, 0xa2, 0x1, 0x80000001, 0x9739, 0x6, 0x3, 0x400, 0x9, 0x6, 0x5, 0x100, 0x6, 0x7, 0x9, 0x60, 0x2, 0x80, 0x37a, 0x5, 0x1000, 0xd, 0x1000, 0x9, 0x7fffffff, 0x100, 0x5, 0x3, 0x8, 0x0, 0x4, 0x4, 0x59, 0x7, 0x0, 0x1, 0x6, 0x5, 0x100, 0x4, 0x1, 0x7e, 0x0, 0xfffff001, 0x86, 0x0, 0x8, 0x9, 0xfffffff7, 0x2, 0x80000001, 0x80, 0x100, 0x2, 0x9, 0x3, 0x0, 0x6, 0xff, 0x9, 0x3, 0x4, 0x10001, 0x3, 0x5, 0x3, 0x5, 0x9, 0xfffffffe, 0xf, 0x5, 0x96, 0x100, 0x1ff, 0xe7f, 0x3, 0x3, 0x14, 0x6, 0x9, 0x7f, 0x8, 0x1e79, 0xffffff07, 0x8, 0x8fd, 0x0, 0x7f, 0x7, 0x5, 0x80000000, 0x4, 0x7, 0x12f, 0x48b, 0x1fffe000, 0x10001, 0xffff, 0x61a5, 0x100, 0x2, 0x6, 0xa470, 0x1ff, 0x3, 0x96753b6c, 0x7fff, 0x3, 0x6, 0xb2c6, 0x10, 0x401, 0x8, 0x9f8, 0x3, 0x1, 0x50d1, 0xc928, 0x3, 0x4, 0x7f, 0x5, 0x1, 0x10000, 0x4, 0x6, 0x5, 0x40, 0x200, 0x2, 0x7ff, 0x101, 0x84, 0x8, 0x800, 0x9d4, 0x40, 0x5, 0x3f3, 0x0, 0x5, 0x8, 0x7, 0x8, 0x4, 0x59, 0x1a6, 0xc, 0x6, 0x380000, 0x0, 0x3ff, 0x182d, 0x9, 0x9, 0x2, 0x4, 0x7, 0x41, 0x514, 0x5, 0x4, 0x1, 0x10001, 0x89c8, 0x5, 0x5, 0x1ff, 0x1, 0xe1, 0x400594a6, 0x0, 0xffff7fff, 0x64b, 0x1000, 0x81, 0x9, 0x3f, 0x2, 0x4000000, 0x0, 0x4, 0x80000001, 0x8000, 0xfffffffd, 0x8, 0x2b8, 0x58b, 0x3, 0x10, 0x7, 0x9, 0x8, 0x80000001, 0x2, 0x8000, 0x7, 0x1, 0x9, 0x971f, 0x401, 0x1, 0x7, 0xd42, 0x5, 0xff, 0x6, 0x6, 0x6, 0x7fff, 0x1000, 0x361a, 0x3, 0x2, 0x7, 0x5, 0x3, 0xb, 0x5, 0x10001, 0x6, 0x1, 0xffffffff, 0x20c, 0x6, 0x7, 0x3, 0x401, 0x9351, 0xffffff97, 0x7, 0x5, 0x4, 0x10000, 0x6, 0x2, 0x1]}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000002300)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000023c0)={0x18, r6, 0x6, 0x0, &(0x7f0000002340)=[{0x3, 0x9}, {0x400, 0x8}, {0x5, 0xf1a}, {0x2ac37c98, 0x4}, {0x4fb9, 0xfff}, {0x4, 0x8}]}) readv(r0, &(0x7f00000022c0)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000002200)=""/139, 0x8b}, {&(0x7f00000000c0)=""/106, 0x6a}], 0x4) 10.999061789s ago: executing program 1 (id=4932): sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000440)={0x10200, 0x7, 0x10002, 0x1000, &(0x7f0000fff000/0x1000)=nil}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x3, 0x1, 0x89, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x4000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.981459572s ago: executing program 5 (id=4933): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x1, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") io_uring_setup(0x4c01, &(0x7f0000000240)={0x0, 0x417a, 0x40, 0x8001002, 0x3d5}) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x43, 0x32344d59, 0x0, 0xfffffffd, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="050027bd700000a668bc25ef288195c062ae860000000600000008000300", @ANYRES32, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) 8.097455056s ago: executing program 1 (id=4936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x4) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x5}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) 6.953112473s ago: executing program 5 (id=4938): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000090000180000000000000000000000000000009500000000000000360a020000000000180100002020782500380000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 6.880904285s ago: executing program 1 (id=4939): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}}, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3, 0xfe}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0xfd88}, 0x1, 0x0, 0x0, 0x10044}, 0x1) 4.746243555s ago: executing program 1 (id=4941): syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="307ddfb9", 0x4}, {&(0x7f0000000340)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610a4d9b534b3aa09618dfc04f5504e30a263ad3fedf0a7381a", 0x3c}], 0x2}}], 0x3, 0x2000c8c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000"], 0xd0}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x54, 0x0, 0x31, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3c}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004044}, 0x40000) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) recvmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000001280)=""/79, 0x4f}], 0x2}, 0xc8b}], 0x1, 0x120, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xac, 0x2d, 0x8c, 0x20, 0xc52, 0x2861, 0x137, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x89, 0x1, 0x2, 0x87, 0x70, 0x2a, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x8, 0x4, 0x4}}, {{0x9, 0x5, 0x8, 0x1, 0x0, 0x8, 0x2, 0x7}}]}}]}}]}}, 0x0) 4.275378672s ago: executing program 8 (id=4942): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 4.093638661s ago: executing program 8 (id=4943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x7cc2, 0x0, 0x0, &(0x7f0000001000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x4000884) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000580000001c0a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) socket$inet6(0xa, 0x3, 0x7) 3.699484833s ago: executing program 5 (id=4944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x232, 0x7d, 0x1, {{0x500, 0xf1, 0x0, 0x400, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xbf\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 2.527446657s ago: executing program 5 (id=4945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='ip6gretap0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) write$ppp(r2, &(0x7f0000000580)='Di', 0x2) getpriority(0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64d9ff00000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000040)='./file7\x00', &(0x7f0000000180)='./file1\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 1.460244259s ago: executing program 1 (id=4946): sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000440)={0x10200, 0x7, 0x10002, 0x1000, &(0x7f0000fff000/0x1000)=nil}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x3, 0x1, 0x89, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x1000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.255787087s ago: executing program 8 (id=4947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000190001000000000000000000200100000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000080ffffffffffffff000000000000000000000000000000000000000000000000000000ffffffffffffffbf0000000000000200000000000000000000000000000000000000000000000000000000000000400009000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003300"], 0x13c}}, 0x0) 1.243088777s ago: executing program 8 (id=4948): mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000040)={{r1, r2+10000000}, {0x77359400}}, &(0x7f0000000080)) 1.156829709s ago: executing program 8 (id=4949): socket$kcm(0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x40020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r3}}, 0x30) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 682.972044ms ago: executing program 5 (id=4950): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}}, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3, 0xfe}}, 0x18) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0xfd88}, 0x1, 0x0, 0x0, 0x10044}, 0x1) 611.502126ms ago: executing program 2 (id=4951): socket$kcm(0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r3}}, 0x30) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 574.570805ms ago: executing program 8 (id=4952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000040), 0x4) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xd222, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7, 0x0, 0x1}, 0x18) (async) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_POLL_ADD={0x6, 0x60, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x20a4}}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000af2000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) sendmmsg$unix(r8, 0x0, 0x0, 0x2008884) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) (async) sendmmsg(r10, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1844, 0x0) 0s ago: executing program 2 (id=4953): socket$kcm(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000000)={r6}) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8018) connect$x25(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0xaa544, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x8000b, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]}) kernel console output (not intermixed with test programs): .906751][T21505] netlink: 'syz.6.4186': attribute type 12 has an invalid length. [ 1278.923452][T21505] netlink: 'syz.6.4186': attribute type 29 has an invalid length. [ 1279.009537][T21505] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1280.083749][T21516] debugfs: Bad value for 'gid' [ 1280.100227][T21516] debugfs: Bad value for 'gid' [ 1280.345397][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1281.059734][T21530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4193'. [ 1282.912013][T20022] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1282.986504][T21549] bond4: entered promiscuous mode [ 1283.005380][T21549] bond4: entered allmulticast mode [ 1283.067688][T21549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1283.267871][T20022] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.445793][T20022] usb 6-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84 [ 1283.447670][T21550] ntfs3(loop7): try to read out of volume at offset 0x0 [ 1283.473174][T21549] bond4 (unregistering): Released all slaves [ 1283.547489][T20022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.664898][T20022] usb 6-1: Product: syz [ 1283.669117][T20022] usb 6-1: Manufacturer: syz [ 1283.675621][T20022] usb 6-1: SerialNumber: syz [ 1283.688783][T20022] usb 6-1: config 0 descriptor?? [ 1283.699928][T21550] netlink: 'syz.7.4199': attribute type 10 has an invalid length. [ 1283.714411][T20022] usb 6-1: bad CDC descriptors [ 1283.720983][T20022] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 1283.727787][T21550] bond0: (slave wlan1): Opening slave failed [ 1283.736000][T20022] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 1283.749602][T20022] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 1283.786111][T21550] overlayfs: invalid origin (0000) [ 1283.796898][T21555] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1283.854866][T21558] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4201'. [ 1283.864407][T21558] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4201'. [ 1283.873356][T21558] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4201'. [ 1283.946747][ T43] usb 6-1: USB disconnect, device number 55 [ 1283.961632][T21561] block nbd6: not configured, cannot reconfigure [ 1285.355335][T21578] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1285.365350][T21578] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1285.374898][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1285.426504][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1285.687498][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4210'. [ 1285.746990][T21590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4211'. [ 1285.796351][T21592] bond4: entered promiscuous mode [ 1285.803255][T21592] bond4: entered allmulticast mode [ 1285.809376][T21592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1286.075993][T21592] bond4 (unregistering): Released all slaves [ 1286.365421][T21599] netlink: 'syz.2.4213': attribute type 3 has an invalid length. [ 1286.844158][T21606] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1288.581810][T21616] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4219'. [ 1288.682238][T21623] tipc: New replicast peer: 255.255.255.255 [ 1288.691483][T21623] tipc: Enabled bearer , priority 10 [ 1288.702085][T21623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4222'. [ 1288.711595][T21623] tipc: Disabling bearer [ 1289.519129][T12139] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1289.903698][T12139] usb 3-1: Using ep0 maxpacket: 8 [ 1289.915587][T12139] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1289.932783][T12139] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 1289.952983][T12139] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1289.967930][T12139] usb 3-1: config 17 has no interface number 0 [ 1289.983081][T12139] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 170, changing to 7 [ 1290.028229][T12139] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 33185, setting to 1024 [ 1290.063632][T12139] usb 3-1: config 17 interface 8 has no altsetting 0 [ 1290.075808][T12139] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1290.085139][T12139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.095490][T21640] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4226'. [ 1290.104740][T21640] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4226'. [ 1290.118006][T12139] usb 3-1: Product: syz [ 1290.122255][T12139] usb 3-1: Manufacturer: syz [ 1290.127424][T21640] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4226'. [ 1290.130674][T12139] usb 3-1: SerialNumber: syz [ 1290.150951][T21646] netlink: 'syz.1.4228': attribute type 3 has an invalid length. [ 1290.318047][T21651] block nbd7: not configured, cannot reconfigure [ 1290.319701][T21650] netlink: 'syz.5.4231': attribute type 10 has an invalid length. [ 1290.341784][T21650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.352216][T21650] team0: Port device bond0 added [ 1290.654278][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1290.749757][T12139] usb 3-1: selecting invalid altsetting 0 [ 1290.755564][T12139] usb 3-1: 8:6 : no UAC_FORMAT_TYPE desc [ 1290.761921][T12139] usb 3-1: selecting invalid altsetting 0 [ 1290.798583][T12139] usb 3-1: USB disconnect, device number 79 [ 1294.071274][T21714] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4246'. [ 1294.159627][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4247'. [ 1294.177049][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4247'. [ 1294.281539][T21722] fuse: Bad value for 'fd' [ 1294.378920][T21727] debugfs: Bad value for 'gid' [ 1294.511394][T21727] debugfs: Bad value for 'gid' [ 1294.844037][T21737] ceph: No mds server is up or the cluster is laggy [ 1294.857721][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1295.165959][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1296.575648][T21762] tipc: Invalid UDP bearer configuration [ 1296.575705][T21762] tipc: Enabling of bearer rejected, failed to enable media [ 1296.784024][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4262'. [ 1296.810978][T21769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.823333][T21775] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1296.826490][T21776] 9pnet_fd: Insufficient options for proto=fd [ 1296.835289][T21775] EXT4-fs (loop1): unable to read superblock [ 1296.893755][T21769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.964831][T21778] debugfs: Bad value for 'gid' [ 1296.969832][T21778] debugfs: Bad value for 'gid' [ 1297.125352][T21783] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1297.560596][T21792] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1297.567148][T21792] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1297.575515][T21792] vhci_hcd vhci_hcd.0: Device attached [ 1297.617534][T21796] tipc: New replicast peer: 255.255.255.255 [ 1297.621531][T21793] vhci_hcd: connection closed [ 1297.629443][T15478] vhci_hcd: stop threads [ 1297.631657][T21796] tipc: Enabled bearer , priority 10 [ 1297.634490][T15478] vhci_hcd: release socket [ 1297.650001][T21796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4270'. [ 1297.659056][T15478] vhci_hcd: disconnect device [ 1297.687794][T21796] tipc: Disabling bearer [ 1297.689304][T10722] libceph: connect (1)[c::]:6789 error -101 [ 1297.710366][T21797] ceph: No mds server is up or the cluster is laggy [ 1297.720357][T10722] libceph: mon0 (1)[c::]:6789 connect error [ 1297.727742][T12139] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1297.993519][T21807] netlink: 'syz.7.4272': attribute type 3 has an invalid length. [ 1298.001670][T12139] usb 6-1: Using ep0 maxpacket: 32 [ 1298.022745][T21807] netlink: 'syz.7.4272': attribute type 3 has an invalid length. [ 1298.034507][T12139] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.036029][T21805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4272'. [ 1298.051030][T12139] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.083101][T12139] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1298.126263][T12139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.320911][T12139] usb 6-1: config 0 descriptor?? [ 1298.365921][T12139] hub 6-1:0.0: USB hub found [ 1298.588463][T12139] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 1298.616317][T21815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.625012][T21815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.676359][T21817] bridge0: port 3(team0) entered blocking state [ 1298.682866][T21817] bridge0: port 3(team0) entered listening state [ 1298.689520][T21817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.696762][T21817] bridge0: port 1(bridge_slave_0) entered listening state [ 1298.715110][T21817] bridge0: entered promiscuous mode [ 1298.720719][T21817] bridge0: entered allmulticast mode [ 1299.020659][T12139] hid-generic 0003:046D:C31C.0015: unknown main item tag 0x0 [ 1299.037959][T12139] hid-generic 0003:046D:C31C.0015: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1299.109623][T21824] debugfs: Bad value for 'gid' [ 1299.114794][T21824] debugfs: Bad value for 'gid' [ 1299.189701][ T30] audit: type=1326 audit(1758397733.339:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21825 comm="syz.6.4278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fa638ec29 code=0x0 [ 1299.451895][T12139] usb 6-1: USB disconnect, device number 56 [ 1299.837141][T21839] tipc: Started in network mode [ 1299.845501][T21839] tipc: Node identity ac14140f, cluster identity 4711 [ 1299.854913][T21839] tipc: New replicast peer: 255.255.255.255 [ 1299.859762][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4283'. [ 1299.863024][T21839] tipc: Enabled bearer , priority 10 [ 1299.904617][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4282'. [ 1299.914585][T21839] tipc: Disabling bearer [ 1299.992129][T21846] vfat: Bad value for 'utf8' [ 1300.282107][T21856] debugfs: Bad value for 'gid' [ 1300.287225][T21856] debugfs: Bad value for 'gid' [ 1300.300471][T21854] NILFS (loop5): device size too small [ 1300.436208][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4290'. [ 1300.483015][T21860] macvtap1: entered promiscuous mode [ 1300.488490][T21860] vlan0: entered promiscuous mode [ 1300.508120][T21860] macvtap1: entered allmulticast mode [ 1300.520139][T21860] vlan0: entered allmulticast mode [ 1300.529837][T21860] veth0_vlan: entered allmulticast mode [ 1300.703411][T21868] kvm: vcpu 0: requested 65592 ns lapic timer period limited to 200000 ns [ 1300.719577][ T30] audit: type=1326 audit(1758397734.733:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21862 comm="syz.6.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa638ec29 code=0x7ffc0000 [ 1300.755180][ T30] audit: type=1326 audit(1758397734.733:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21862 comm="syz.6.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa638ec29 code=0x7ffc0000 [ 1300.793524][ T30] audit: type=1326 audit(1758397734.733:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21862 comm="syz.6.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f1fa638ec29 code=0x7ffc0000 [ 1300.816979][ T30] audit: type=1326 audit(1758397734.733:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21862 comm="syz.6.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa638ec29 code=0x7ffc0000 [ 1300.880286][ T30] audit: type=1326 audit(1758397734.733:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21862 comm="syz.6.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa638ec29 code=0x7ffc0000 [ 1300.907050][ T30] audit: type=1326 audit(1758397734.733:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21862 comm="syz.6.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fa638ec29 code=0x7ffc0000 [ 1300.934143][ T30] audit: type=1326 audit(1758397734.733:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21862 comm="syz.6.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa638ec29 code=0x7ffc0000 [ 1300.961635][ T30] audit: type=1326 audit(1758397734.733:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21862 comm="syz.6.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa638ec29 code=0x7ffc0000 [ 1300.984059][ C0] vkms_vblank_simulate: vblank timer overrun [ 1302.361697][T21886] debugfs: Bad value for 'gid' [ 1303.121216][T21886] debugfs: Bad value for 'gid' [ 1303.686910][T21896] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1303.713585][T21896] hfs: can't find a HFS filesystem on dev loop1 [ 1303.733862][T21898] random: crng reseeded on system resumption [ 1303.761560][ T30] audit: type=1326 audit(1758397737.604:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21897 comm="syz.5.4301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f082418ec29 code=0x0 [ 1303.783463][ C0] vkms_vblank_simulate: vblank timer overrun [ 1303.893407][T21904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4303'. [ 1303.912310][T21904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4303'. [ 1303.976480][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4304'. [ 1304.344988][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4312'. [ 1304.369641][T12139] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1304.890696][T12139] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.173799][T12139] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1305.183121][T12139] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1305.353315][T12139] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1305.457873][T12139] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1305.467130][T12139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.487470][T12139] usb 3-1: Product: syz [ 1305.491794][T12139] usb 3-1: Manufacturer: syz [ 1305.496395][T12139] usb 3-1: SerialNumber: syz [ 1305.784658][T12139] usb 3-1: 0:2 : does not exist [ 1305.845323][T12139] usb 3-1: USB disconnect, device number 80 [ 1305.949065][T20017] udevd[20017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1306.309271][T21955] ceph: No mds server is up or the cluster is laggy [ 1306.320900][T21355] libceph: connect (1)[c::]:6789 error -101 [ 1306.468959][T21355] libceph: mon0 (1)[c::]:6789 connect error [ 1307.507843][T21974] tipc: New replicast peer: 255.255.255.255 [ 1307.525249][T21974] tipc: Enabled bearer , priority 10 [ 1307.548679][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4324'. [ 1307.589174][ T5932] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1307.597231][T21974] tipc: Disabling bearer [ 1307.757578][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 1307.818459][ T5932] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1307.834819][ T5932] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1307.888505][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.911686][ T5932] usb 3-1: Product: syz [ 1307.921290][ T5932] usb 3-1: Manufacturer: syz [ 1307.930362][ T5932] usb 3-1: SerialNumber: syz [ 1307.946681][ T5932] usb 3-1: config 0 descriptor?? [ 1307.971359][ T5932] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1307.979675][ T5932] usb 3-1: setting power ON [ 1307.984313][ T5932] dvb-usb: bulk message failed: -22 (2/0) [ 1307.996111][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1308.031687][ T5932] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1308.040305][ T5932] usb 3-1: media controller created [ 1308.083309][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1308.115751][T21993] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4328'. [ 1308.211109][ T5932] usb 3-1: selecting invalid altsetting 6 [ 1308.235195][T21997] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4328'. [ 1308.243100][T21965] lo speed is unknown, defaulting to 1000 [ 1308.265118][ T5932] usb 3-1: digital interface selection failed (-22) [ 1308.282634][ T5932] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1308.297465][T21965] ip6gretap0 speed is unknown, defaulting to 1000 [ 1308.322009][ T5932] usb 3-1: setting power OFF [ 1308.331779][ T5932] dvb-usb: bulk message failed: -22 (2/0) [ 1308.346055][ T5932] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1308.356902][ T5932] (NULL device *): no alternate interface [ 1308.449802][T22003] random: crng reseeded on system resumption [ 1308.732204][ T5932] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1308.756441][ T30] audit: type=1326 audit(1758397742.281:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22002 comm="syz.5.4331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f082418ec29 code=0x0 [ 1308.829196][ T5932] usb 3-1: USB disconnect, device number 81 [ 1309.524148][T22011] netlink: 'syz.6.4333': attribute type 1 has an invalid length. [ 1309.544218][T22011] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4333'. [ 1309.651209][T22010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.751786][T22010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.841792][T22010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.312815][T22010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.452531][T10128] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.475316][T10128] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.504052][T10128] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.512182][T22024] binder: 22020:22024 ioctl 40087543 2000000000c0 returned -22 [ 1310.671791][T10128] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.825470][T22029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.124816][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1311.348900][T22035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4340'. [ 1311.423997][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1311.431136][ T9] usb 6-1: config 4 has an invalid interface number: 83 but max is 0 [ 1311.448405][ T9] usb 6-1: config 4 has no interface number 0 [ 1311.458857][ T9] usb 6-1: config 4 interface 83 has no altsetting 0 [ 1311.474634][ T9] usb 6-1: New USB device found, idVendor=1385, idProduct=5f03, bcdDevice=3c.a5 [ 1311.486519][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.495601][ T9] usb 6-1: Product: syz [ 1311.500042][ T9] usb 6-1: Manufacturer: syz [ 1311.504626][ T9] usb 6-1: SerialNumber: syz [ 1311.514222][ T9] usb 6-1: Could not find all expected endpoints [ 1311.851485][T10722] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1311.941461][T22043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1311.948786][T22043] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1311.961031][T22043] EXT4-fs (loop1): unable to read superblock [ 1312.013605][T10722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.026206][T10722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.038009][T10722] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1312.051167][T10722] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1312.061051][T10722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.071979][T10722] usb 3-1: config 0 descriptor?? [ 1312.515869][T10722] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1312.523599][T10722] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1312.532912][T10722] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1312.544653][T10722] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1312.568569][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1312.574993][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.594969][T10722] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1312.616409][T10722] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1312.632711][T10722] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1312.786762][T22053] netlink: 244 bytes leftover after parsing attributes in process `syz.7.4346'. [ 1312.806001][T10722] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1313.294119][T10722] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1313.855242][ T9] usb 6-1: USB disconnect, device number 57 [ 1313.858183][T10722] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1313.937723][T22059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4347'. [ 1313.960842][T22061] debugfs: Bad value for 'gid' [ 1313.965637][T22061] debugfs: Bad value for 'gid' [ 1314.579792][ T24] usb 3-1: USB disconnect, device number 82 [ 1315.262525][T22065] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1315.334200][T22058] fido_id[22058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1315.650120][T22076] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4351'. [ 1315.660198][T22076] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4351'. [ 1316.352519][T22078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4354'. [ 1317.672579][T22093] ceph: No mds server is up or the cluster is laggy [ 1317.680177][T10722] libceph: connect (1)[c::]:6789 error -101 [ 1317.688622][T10722] libceph: mon0 (1)[c::]:6789 connect error [ 1318.266217][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1318.351521][T22115] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4365'. [ 1318.364587][T22109] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1318.448182][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1318.456852][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.485020][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1318.510073][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.539201][ T9] usb 3-1: config 0 descriptor?? [ 1318.561288][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1318.609499][T22122] can0: slcan on ttyprintk. [ 1318.942576][T22098] F2FS-fs: heap/no_heap options were deprecated [ 1318.952485][T22098] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1318.961685][T22098] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1318.975249][T22098] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1318.983841][T22098] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1319.156607][T22098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4361'. [ 1319.167073][T22098] netem: invalid attributes len -12 [ 1319.172487][T22098] netem: change failed [ 1319.178042][T22131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4361'. [ 1319.187591][T22131] netem: invalid attributes len -12 [ 1319.193282][T22131] netem: change failed [ 1319.849806][ T9] gspca_vc032x: reg_w err -110 [ 1319.855104][ T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 1319.991287][ T9] usb 3-1: USB disconnect, device number 83 [ 1320.051634][T22118] can0 (unregistered): slcan off ttyprintk. [ 1322.380922][T22156] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4378'. [ 1322.916427][ T5932] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1322.950351][ T30] audit: type=1326 audit(1758397755.564:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082418ec29 code=0x7ffc0000 [ 1322.987724][ T30] audit: type=1326 audit(1758397755.564:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082418ec29 code=0x7ffc0000 [ 1322.989476][T22163] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.066032][ T5932] usb 3-1: device descriptor read/64, error -71 [ 1323.143141][T22163] hfs: can't find a HFS filesystem on dev loop5 [ 1323.737856][ T30] audit: type=1326 audit(1758397755.592:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f082418ec29 code=0x7ffc0000 [ 1323.769429][ T30] audit: type=1326 audit(1758397755.592:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082418ec29 code=0x7ffc0000 [ 1323.807000][T22163] overlay: ./file0 is not a directory [ 1323.879597][ T5932] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1324.296358][ T30] audit: type=1326 audit(1758397755.592:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082418ec29 code=0x7ffc0000 [ 1324.384423][ T30] audit: type=1326 audit(1758397755.592:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f082418ec29 code=0x7ffc0000 [ 1324.425279][ T5932] usb 3-1: device descriptor read/64, error -71 [ 1324.766036][ T5932] usb usb3-port1: attempt power cycle [ 1324.834541][ T30] audit: type=1326 audit(1758397755.592:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082418ec29 code=0x7ffc0000 [ 1324.900792][ T30] audit: type=1326 audit(1758397755.592:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f082418ec29 code=0x7ffc0000 [ 1324.928691][ T30] audit: type=1326 audit(1758397755.592:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082418ec29 code=0x7ffc0000 [ 1324.954731][ T30] audit: type=1326 audit(1758397755.592:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22162 comm="syz.5.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f082418ec29 code=0x7ffc0000 [ 1325.936119][ T5932] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1325.998811][ T5932] usb 3-1: device descriptor read/8, error -71 [ 1328.321425][T22226] 9pnet_fd: Insufficient options for proto=fd [ 1329.304600][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4400'. [ 1331.020914][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1331.029530][ C0] bridge0: port 3(team0) entered learning state [ 1332.197874][T22268] 9pnet_fd: Insufficient options for proto=fd [ 1332.204626][T22264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.240778][T22264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.430954][ T5932] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1332.506378][T20022] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1332.592810][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.604300][ T5932] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1332.613747][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.624728][ T5932] usb 6-1: config 0 descriptor?? [ 1332.666455][T20022] usb 3-1: Using ep0 maxpacket: 8 [ 1332.673771][T20022] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1332.682206][T20022] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1332.690428][T20022] usb 3-1: config 0 has no interface number 0 [ 1332.696526][T20022] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1332.708329][T20022] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1332.719953][T20022] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1332.733663][T20022] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1332.742842][T20022] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1332.750839][T20022] usb 3-1: Product: syz [ 1332.757552][T20022] usb 3-1: config 0 descriptor?? [ 1332.765904][T22265] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1333.161419][ T5932] usbhid 6-1:0.0: can't add hid device: -71 [ 1333.190071][ T5932] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1333.223168][ T5932] usb 6-1: USB disconnect, device number 58 [ 1333.454270][T22284] NILFS (loop1): device size too small [ 1333.577644][T20022] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input33 [ 1334.403025][T10722] usb 3-1: USB disconnect, device number 88 [ 1334.403097][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1334.552188][T22291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'. [ 1335.041548][T10722] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1335.170660][T22305] debugfs: Bad value for 'gid' [ 1335.175641][T22305] debugfs: Bad value for 'gid' [ 1335.210853][T10722] usb 6-1: Using ep0 maxpacket: 16 [ 1335.219428][T10722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.230969][T10722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.253178][T10722] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1335.271035][T22308] 9p: Unknown access argument : -22 [ 1335.273428][T10722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.321267][T10722] usb 6-1: config 0 descriptor?? [ 1335.776752][T10722] apple 0003:05AC:024B.0017: unknown main item tag 0x0 [ 1335.785814][T10722] apple 0003:05AC:024B.0017: unknown main item tag 0x0 [ 1335.793081][T10722] apple 0003:05AC:024B.0017: unknown main item tag 0x0 [ 1335.800998][T10722] apple 0003:05AC:024B.0017: unknown main item tag 0x0 [ 1335.807886][T10722] apple 0003:05AC:024B.0017: unknown main item tag 0x0 [ 1335.817291][T10722] apple 0003:05AC:024B.0017: unknown main item tag 0x0 [ 1335.825324][T10722] apple 0003:05AC:024B.0017: unknown main item tag 0x0 [ 1335.834788][T10722] apple 0003:05AC:024B.0017: unknown main item tag 0x0 [ 1335.841749][T10722] apple 0003:05AC:024B.0017: unknown main item tag 0x0 [ 1335.848992][T10722] apple 0003:05AC:024B.0017: unknown main item tag 0x0 [ 1335.858783][T10722] apple 0003:05AC:024B.0017: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.5-1/input0 [ 1336.113331][T22297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.139863][T22297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.275581][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1337.275598][ T30] audit: type=1326 audit(1758397768.968:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22330 comm="syz.7.4429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f563098ec29 code=0x0 [ 1337.404888][T22336] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4430'. [ 1337.961743][T20022] usb 6-1: USB disconnect, device number 59 [ 1339.171531][T22359] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4436'. [ 1339.265277][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4436'. [ 1339.928871][T22365] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1340.183816][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1340.202351][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1340.280978][T22374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1340.438454][T22379] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1340.990374][T12443] syz_tun (unregistering): left allmulticast mode [ 1341.057256][T20968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1341.073202][T20968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1341.085289][T20968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1341.095525][T20968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1341.105799][T20968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1341.248537][T12128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1341.257789][T12128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1341.359320][T22390] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4444'. [ 1341.541533][T12128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1341.543764][T22390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4444'. [ 1341.552132][T12128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1341.558274][T22390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4444'. [ 1341.583393][T12128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1341.644758][T22384] lo speed is unknown, defaulting to 1000 [ 1341.677501][T22384] ip6gretap0 speed is unknown, defaulting to 1000 [ 1342.058747][T22399] 9pnet_fd: Insufficient options for proto=fd [ 1342.608587][T22401] ceph: No mds server is up or the cluster is laggy [ 1342.619144][T21355] libceph: connect (1)[c::]:6789 error -101 [ 1342.688134][T21355] libceph: mon0 (1)[c::]:6789 connect error [ 1342.852603][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1343.057742][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1343.067045][ T9] usb 2-1: config 0 has an invalid interface number: 137 but max is 0 [ 1343.078706][ T9] usb 2-1: config 0 has no interface number 0 [ 1343.084871][ T9] usb 2-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1343.119058][ T9] usb 2-1: config 0 interface 137 has no altsetting 0 [ 1343.343338][ T9] usb 2-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 1343.353516][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.363871][ T9] usb 2-1: Product: syz [ 1343.370650][ T9] usb 2-1: Manufacturer: syz [ 1343.389022][ T9] usb 2-1: SerialNumber: syz [ 1343.400056][ T9] usb 2-1: config 0 descriptor?? [ 1343.505260][ T9] ftdi_sio 2-1:0.137: FTDI USB Serial Device converter detected [ 1343.524688][ T9] usb 2-1: Detected SIO [ 1343.531532][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 1343.646511][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1343.795138][T20968] Bluetooth: hci2: command tx timeout [ 1343.898430][T22384] chnl_net:caif_netlink_parms(): no params data found [ 1344.091050][T22384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.099512][T22384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.108086][T22384] bridge_slave_0: entered allmulticast mode [ 1344.118295][T22384] bridge_slave_0: entered promiscuous mode [ 1344.127789][T22384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.134962][T22384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.142315][T22384] bridge_slave_1: entered allmulticast mode [ 1344.149760][T22384] bridge_slave_1: entered promiscuous mode [ 1344.208875][T22384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.231041][T22384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.297569][T22384] team0: Port device team_slave_0 added [ 1344.306424][T22384] team0: Port device team_slave_1 added [ 1344.313064][T22430] tipc: New replicast peer: 255.255.255.255 [ 1344.320367][T22430] tipc: Enabled bearer , priority 10 [ 1344.337504][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4453'. [ 1344.346622][T22430] tipc: Disabling bearer [ 1344.373855][T22384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.380900][T22384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.407624][T22384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.428007][T22384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.435056][T22384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.460968][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.467755][T22384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.837101][T22433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1344.980118][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4455'. [ 1345.419648][T21406] usb 2-1: USB disconnect, device number 92 [ 1345.623839][T21406] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1345.644118][T22384] hsr_slave_0: entered promiscuous mode [ 1345.670889][T21406] ftdi_sio 2-1:0.137: device disconnected [ 1345.708332][T22384] hsr_slave_1: entered promiscuous mode [ 1345.764980][T22443] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4456'. [ 1345.809202][T22384] debugfs: 'hsr0' already exists in 'hsr' [ 1345.809639][T22443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4456'. [ 1345.822459][T22384] Cannot create hsr debugfs directory [ 1345.829050][T22443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4456'. [ 1345.986640][T20968] Bluetooth: hci2: command tx timeout [ 1346.005178][T22447] program syz.1.4458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1347.548539][ T5996] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1348.013952][T22458] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4459'. [ 1348.023295][T22458] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4459'. [ 1348.142248][T22462] debugfs: Bad value for 'gid' [ 1348.160051][ T5996] usb 3-1: Using ep0 maxpacket: 32 [ 1348.167543][T22462] debugfs: Bad value for 'gid' [ 1348.171443][ T5996] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 1348.210283][T20968] Bluetooth: hci2: command tx timeout [ 1348.406155][ T5996] usb 3-1: config 0 has no interface number 0 [ 1348.606173][ T5996] usb 3-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1348.625624][ T5996] usb 3-1: config 0 interface 137 has no altsetting 0 [ 1348.661875][ T5996] usb 3-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 1348.671344][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.679320][ T5996] usb 3-1: Product: syz [ 1348.705258][ T5996] usb 3-1: Manufacturer: syz [ 1348.709950][ T5996] usb 3-1: SerialNumber: syz [ 1348.727059][ T5996] usb 3-1: config 0 descriptor?? [ 1348.759156][T22384] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.761986][ T5996] ftdi_sio 3-1:0.137: FTDI USB Serial Device converter detected [ 1348.834423][ T5996] usb 3-1: Detected SIO [ 1348.838624][ T5996] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 1348.885937][ T5996] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1348.892610][T22468] tipc: New replicast peer: 255.255.255.255 [ 1349.012698][ T5996] usb 3-1: USB disconnect, device number 89 [ 1349.021175][T22468] tipc: Enabled bearer , priority 10 [ 1349.058467][T22471] fuse: Unknown parameter 'fowner<00000000000000000000' [ 1349.087890][ T5996] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1349.098892][T22384] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.199866][T22468] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4463'. [ 1349.200966][ T5996] ftdi_sio 3-1:0.137: device disconnected [ 1349.216014][T22468] tipc: Disabling bearer [ 1349.216307][T22475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4465'. [ 1349.776657][T22384] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.806805][T22477] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4466'. [ 1349.849581][T22479] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1349.859283][T22479] FAT-fs (loop5): unable to read boot sector [ 1350.060462][ T5996] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1350.243069][T22384] bond0: (slave netdevsim0): Releasing backup interface [ 1350.330623][T22384] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.348607][ T5996] usb 3-1: Using ep0 maxpacket: 32 [ 1350.355562][ T5996] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1350.368538][ T5996] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1350.403835][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.411942][ T5996] usb 3-1: Product: syz [ 1350.416770][ T5996] usb 3-1: Manufacturer: syz [ 1350.423404][ T5996] usb 3-1: SerialNumber: syz [ 1350.433895][T20968] Bluetooth: hci2: command tx timeout [ 1350.440948][ T5996] usb 3-1: config 0 descriptor?? [ 1351.441628][T22488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1351.448795][T22488] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1351.549762][T22488] EXT4-fs (loop7): unable to read superblock [ 1351.578387][T22492] random: crng reseeded on system resumption [ 1351.601968][T22384] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1351.673358][T22471] autofs4:pid:22471:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 1351.673687][T22384] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1351.692816][ T5996] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 1351.700927][ T5996] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 1351.730933][T22384] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1351.753746][T22496] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1351.770960][T22496] exFAT-fs (loop1): unable to read boot sector [ 1351.780385][T22384] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1351.787870][T22496] exFAT-fs (loop1): failed to read boot sector [ 1351.798686][T22496] exFAT-fs (loop1): failed to recognize exfat type [ 1352.943344][T22512] tipc: New replicast peer: 255.255.255.255 [ 1352.961185][T22512] tipc: Enabled bearer , priority 10 [ 1353.157463][ T9] usb 3-1: USB disconnect, device number 90 [ 1353.173449][T22518] FAULT_INJECTION: forcing a failure. [ 1353.173449][T22518] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.216585][T22518] CPU: 0 UID: 0 PID: 22518 Comm: syz.7.4476 Not tainted syzkaller #0 PREEMPT(full) [ 1353.216609][T22518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1353.216621][T22518] Call Trace: [ 1353.216628][T22518] [ 1353.216637][T22518] dump_stack_lvl+0x189/0x250 [ 1353.216663][T22518] ? __pfx____ratelimit+0x10/0x10 [ 1353.216683][T22518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1353.216704][T22518] ? __pfx__printk+0x10/0x10 [ 1353.216732][T22518] ? __pfx___might_resched+0x10/0x10 [ 1353.216754][T22518] ? fs_reclaim_acquire+0x7d/0x100 [ 1353.216777][T22518] should_fail_ex+0x414/0x560 [ 1353.216804][T22518] should_failslab+0xa8/0x100 [ 1353.216824][T22518] __kmalloc_noprof+0xcb/0x7f0 [ 1353.216846][T22518] ? tomoyo_encode+0x28b/0x550 [ 1353.216874][T22518] tomoyo_encode+0x28b/0x550 [ 1353.216902][T22518] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1353.216935][T22518] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1353.216955][T22518] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1353.216977][T22518] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1353.217035][T22518] ? __fget_files+0x2a/0x420 [ 1353.217057][T22518] ? __fget_files+0x3a0/0x420 [ 1353.217073][T22518] ? __fget_files+0x2a/0x420 [ 1353.217096][T22518] security_file_ioctl+0xcb/0x2d0 [ 1353.217117][T22518] __se_sys_ioctl+0x47/0x170 [ 1353.217146][T22518] do_syscall_64+0xfa/0xfa0 [ 1353.217166][T22518] ? lockdep_hardirqs_on+0x9c/0x150 [ 1353.217185][T22518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.217203][T22518] ? clear_bhb_loop+0x60/0xb0 [ 1353.217225][T22518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.217241][T22518] RIP: 0033:0x7f563098ec29 [ 1353.217264][T22518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1353.217279][T22518] RSP: 002b:00007f56317a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1353.217298][T22518] RAX: ffffffffffffffda RBX: 00007f5630bd5fa0 RCX: 00007f563098ec29 [ 1353.217311][T22518] RDX: 0000200000000580 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1353.217322][T22518] RBP: 00007f56317a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.217334][T22518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1353.217345][T22518] R13: 00007f5630bd6038 R14: 00007f5630bd5fa0 R15: 00007ffe15a0a908 [ 1353.217377][T22518] [ 1353.217454][T22518] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1353.272197][T22384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.490724][T22514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4475'. [ 1353.500332][T22514] tipc: Disabling bearer [ 1353.693307][T22534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4482'. [ 1353.715561][T22384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.392950][T22534] netlink: 336 bytes leftover after parsing attributes in process `syz.5.4482'. [ 1354.420023][T10131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.427151][T10131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.545037][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.552194][ T8768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.727069][T22544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4485'. [ 1354.774827][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1354.945909][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1354.952817][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1354.962967][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1354.972556][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.996188][ T9] usb 6-1: Product: syz [ 1355.013789][ T9] usb 6-1: Manufacturer: syz [ 1355.032923][ T9] usb 6-1: SerialNumber: syz [ 1355.058278][ T9] usb 6-1: config 0 descriptor?? [ 1355.295093][T22384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.482706][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4487'. [ 1355.492802][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4487'. [ 1355.504957][ T9] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1355.515362][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4487'. [ 1355.996401][T22567] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1356.035892][T22567] EXT4-fs (loop7): unable to read superblock [ 1356.161361][T22384] veth0_vlan: entered promiscuous mode [ 1356.192899][T22384] veth1_vlan: entered promiscuous mode [ 1356.494728][T22384] veth0_macvtap: entered promiscuous mode [ 1357.187821][T22384] veth1_macvtap: entered promiscuous mode [ 1357.218402][T22384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.247941][T21355] usb 6-1: USB disconnect, device number 60 [ 1357.253398][T22384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.283863][T22584] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 1357.420474][T22586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1358.841586][T10131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.858423][T10131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.885326][T10131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.899509][T10131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.100016][T15478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.118022][T15478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.156637][T15478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.173315][T15478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.563680][T10722] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1359.745367][T10722] usb 7-1: Using ep0 maxpacket: 32 [ 1359.767645][T10722] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1359.797368][T10722] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1359.820209][T10722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.833615][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4500'. [ 1359.862983][T10722] usb 7-1: Product: syz [ 1359.867167][T10722] usb 7-1: Manufacturer: syz [ 1359.871820][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4500'. [ 1359.881636][T10722] usb 7-1: SerialNumber: syz [ 1359.889376][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4500'. [ 1359.899912][T10722] usb 7-1: config 0 descriptor?? [ 1359.985244][T22601] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1359.997329][T10722] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input35 [ 1360.705306][T22625] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4504'. [ 1360.714949][T22625] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4504'. [ 1361.389513][T22632] sp0: Synchronizing with TNC [ 1361.644113][T22639] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4507'. [ 1361.669776][T22639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4507'. [ 1361.716972][T22639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4507'. [ 1361.747910][T20022] usb 7-1: USB disconnect, device number 39 [ 1361.747990][ C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1361.882021][T22639] block nbd2: not configured, cannot reconfigure [ 1361.948152][T22646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4509'. [ 1362.268587][T20022] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1362.287960][T21355] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1362.353986][T10722] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1363.070154][T20022] usb 7-1: Using ep0 maxpacket: 8 [ 1363.119339][T21355] usb 3-1: Using ep0 maxpacket: 32 [ 1363.149697][T21355] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 1363.156346][T20022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.158093][T21355] usb 3-1: config 0 has no interface number 0 [ 1363.174639][T21355] usb 3-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1363.176342][T22662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.185925][T21355] usb 3-1: config 0 interface 137 has no altsetting 0 [ 1363.186759][ C0] bridge0: port 3(team0) entered forwarding state [ 1363.186830][ C0] bridge0: topology change detected, propagating [ 1363.187573][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.187614][ C0] bridge0: topology change detected, propagating [ 1363.191374][T21355] usb 3-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 1363.212391][T20022] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.216799][T21355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.254321][T20022] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.262598][T22662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.277091][T10722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.289932][T10722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.300605][T10722] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1363.310052][T10722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.315433][T20022] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1363.318739][T21355] usb 3-1: Product: syz [ 1363.377827][T10722] usb 6-1: config 0 descriptor?? [ 1363.385604][T21355] usb 3-1: Manufacturer: syz [ 1363.390884][T21355] usb 3-1: SerialNumber: syz [ 1363.577532][T21355] usb 3-1: config 0 descriptor?? [ 1363.596836][T20022] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1363.648167][T21355] ftdi_sio 3-1:0.137: FTDI USB Serial Device converter detected [ 1363.659181][T20022] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1363.659632][T21355] usb 3-1: Detected SIO [ 1363.673100][T21355] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 1363.673978][T20022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.702488][T20022] usb 7-1: config 0 descriptor?? [ 1363.705770][T21355] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1363.718864][T10722] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1363.723014][T22667] tipc: Enabling of bearer rejected, already enabled [ 1363.749389][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1363.763802][T22667] tipc: Disabling bearer [ 1363.879771][T22670] F2FS-fs: Conflicting test_dummy_encryption options [ 1363.905911][T10722] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 1364.143837][T10722] cp2112 0003:10C4:EA90.0018: error setting SMBus config [ 1364.796072][T10722] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -71 [ 1364.832269][T10722] usb 6-1: USB disconnect, device number 61 [ 1365.023089][T21355] usb 3-1: USB disconnect, device number 91 [ 1365.107803][T21355] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1365.141014][T21355] ftdi_sio 3-1:0.137: device disconnected [ 1365.479370][T22693] No control pipe specified [ 1365.593613][T22696] devtmpfs: Unknown parameter 'i2ժg5Hxa5' [ 1365.622520][T22696] vfat: Unknown parameter 'nonumta5l' [ 1365.754113][ T24] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 1365.946837][T21355] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1366.490803][T20022] usbhid 7-1:0.0: can't add hid device: -71 [ 1366.497889][ T24] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1366.509452][T20022] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1366.536693][T20022] usb 7-1: USB disconnect, device number 40 [ 1366.538364][ T24] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1366.574549][ T24] usb 6-1: config 0 has no interface number 0 [ 1366.586869][ T24] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1366.743428][T21355] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1366.841749][ T24] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1367.089802][T21355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.122143][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1367.144090][T21355] usb 3-1: config 0 descriptor?? [ 1367.192841][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.205436][T21355] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1367.219003][ T24] usb 6-1: config 0 descriptor?? [ 1367.667430][ T24] usb 6-1: USB disconnect, device number 62 [ 1367.817189][T22718] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4531'. [ 1367.826551][T22718] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4531'. [ 1367.840932][T22718] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4531'. [ 1367.888127][T22724] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.4532'. [ 1367.898670][T22724] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1367.932490][T22725] block nbd6: not configured, cannot reconfigure [ 1368.042472][T21355] gspca_stv06xx: I2C: Read error writing address: -71 [ 1368.059913][T21355] usb 3-1: USB disconnect, device number 92 [ 1368.075904][T22732] debugfs: Bad value for 'gid' [ 1368.094303][T22732] debugfs: Bad value for 'gid' [ 1368.423581][ T24] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1369.014445][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1369.152988][ T24] usb 7-1: config 0 has an invalid interface number: 137 but max is 0 [ 1369.172878][ T24] usb 7-1: config 0 has no interface number 0 [ 1369.201952][ T24] usb 7-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1369.418221][ T24] usb 7-1: config 0 interface 137 has no altsetting 0 [ 1369.428425][ T24] usb 7-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 1369.438627][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.446961][ T24] usb 7-1: Product: syz [ 1369.451209][ T24] usb 7-1: Manufacturer: syz [ 1369.456213][ T24] usb 7-1: SerialNumber: syz [ 1370.276428][ T24] usb 7-1: config 0 descriptor?? [ 1370.292159][ T24] ftdi_sio 7-1:0.137: FTDI USB Serial Device converter detected [ 1370.315191][ T24] usb 7-1: Detected SIO [ 1370.387081][T22750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4540'. [ 1370.397039][T22750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4540'. [ 1370.778596][ T24] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 1371.085519][ T24] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1371.234395][T22756] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1371.263356][T22756] FAT-fs (loop2): unable to read boot sector [ 1371.460768][T22762] tipc: Cannot configure node identity twice [ 1371.587580][T22765] netlink: 'syz.7.4544': attribute type 2 has an invalid length. [ 1371.836680][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1372.103907][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1372.111144][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.174296][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.191413][ T24] usb 7-1: USB disconnect, device number 41 [ 1372.199590][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1372.211430][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1372.222200][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1372.238876][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.255745][ T24] ftdi_sio 7-1:0.137: device disconnected [ 1372.319641][ T9] usb 3-1: config 0 descriptor?? [ 1372.530399][T22786] sp0: Synchronizing with TNC [ 1373.330803][T22800] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1374.480649][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1374.486609][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1374.496330][ T9] usb 3-1: USB disconnect, device number 93 [ 1374.923651][T22811] debugfs: Bad value for 'gid' [ 1374.932535][T22813] debugfs: Bad value for 'gid' [ 1374.941718][T22811] debugfs: Bad value for 'gid' [ 1374.946456][T22813] debugfs: Bad value for 'gid' [ 1375.214977][T10722] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1375.428505][T10722] usb 7-1: Using ep0 maxpacket: 32 [ 1375.447867][T10722] usb 7-1: config 0 has an invalid interface number: 183 but max is 0 [ 1375.477089][T10722] usb 7-1: config 0 has no interface number 0 [ 1375.509807][T10722] usb 7-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1375.547178][T10722] usb 7-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1375.607895][T10722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.680788][T10722] usb 7-1: Product: syz [ 1375.694701][T10722] usb 7-1: Manufacturer: syz [ 1375.706588][T10722] usb 7-1: SerialNumber: syz [ 1375.748816][T10722] usb 7-1: config 0 descriptor?? [ 1375.774252][T22814] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1375.933111][T22831] netlink: 'syz.5.4564': attribute type 3 has an invalid length. [ 1376.121010][T22814] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.4559'. [ 1376.131691][T22814] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1376.182293][T10722] net1080 7-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.6-1, NetChip TurboCONNECT, 86:2a:01:59:fd:be [ 1376.418508][ T9] usb 7-1: USB disconnect, device number 42 [ 1376.425678][ T9] net1080 7-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.6-1, NetChip TurboCONNECT [ 1377.826723][T22846] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1377.853084][T22846] CIFS mount error: No usable UNC path provided in device string! [ 1377.853084][T22846] [ 1377.863654][T22846] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1377.898470][T22846] affs: No valid root block on device nbd6 [ 1378.218790][T10722] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1378.248684][T22845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1378.258829][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1378.272523][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1378.466954][T10722] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1378.497424][T10722] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1378.551483][T10722] usb 7-1: config 1 has no interface number 1 [ 1378.691231][T10722] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1378.700558][T10722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.708556][T10722] usb 7-1: Product: syz [ 1378.723568][T10722] usb 7-1: Manufacturer: syz [ 1378.728176][T10722] usb 7-1: SerialNumber: syz [ 1378.883813][T22851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4569'. [ 1380.117479][T22867] debugfs: Bad value for 'gid' [ 1380.123015][T22867] debugfs: Bad value for 'gid' [ 1381.455254][T10722] usb 7-1: 2:1 : invalid UAC_AS_GENERAL desc [ 1382.093152][T22888] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4581'. [ 1382.167422][T10722] usb 7-1: USB disconnect, device number 43 [ 1382.612601][T21355] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1383.211993][ T30] audit: type=1326 audit(1758397811.389:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec21f8ec29 code=0x7ffc0000 [ 1383.414712][ T30] audit: type=1326 audit(1758397811.389:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec21f2ae09 code=0x7ffc0000 [ 1383.437050][ C0] vkms_vblank_simulate: vblank timer overrun [ 1383.443405][T21355] usb 6-1: config 0 has an invalid interface number: 104 but max is 0 [ 1383.490183][T21355] usb 6-1: config 0 has no interface number 0 [ 1383.530967][ T30] audit: type=1326 audit(1758397811.389:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec21f8ec29 code=0x7ffc0000 [ 1383.579741][T21355] usb 6-1: config 0 interface 104 has no altsetting 0 [ 1383.612958][T21355] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1383.628424][ T30] audit: type=1326 audit(1758397811.389:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec21f2ae09 code=0x7ffc0000 [ 1383.650769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1383.681662][T21355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.743504][ T30] audit: type=1326 audit(1758397811.389:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec21f8ec29 code=0x7ffc0000 [ 1383.743925][T21355] usb 6-1: Product: syz [ 1383.799789][T21355] usb 6-1: Manufacturer: syz [ 1383.803291][ T30] audit: type=1326 audit(1758397811.922:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec21f2ae09 code=0x7ffc0000 [ 1383.804493][T21355] usb 6-1: SerialNumber: syz [ 1383.826765][ C0] vkms_vblank_simulate: vblank timer overrun [ 1383.894258][T21355] usb 6-1: config 0 descriptor?? [ 1384.000151][ T30] audit: type=1326 audit(1758397811.922:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec21f2ae09 code=0x7ffc0000 [ 1384.001652][T21355] usb 6-1: can't set config #0, error -71 [ 1384.022572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1384.135793][ T30] audit: type=1326 audit(1758397811.922:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec21f2ae09 code=0x7ffc0000 [ 1384.429985][ T30] audit: type=1326 audit(1758397811.922:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec21f2ae09 code=0x7ffc0000 [ 1384.434504][T21355] usb 6-1: USB disconnect, device number 63 [ 1384.452390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1384.452779][ T30] audit: type=1326 audit(1758397811.922:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.1.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fec21f2ae09 code=0x7ffc0000 [ 1384.486800][ C0] vkms_vblank_simulate: vblank timer overrun [ 1386.313945][T22930] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1386.838439][T22930] SQUASHFS error: Failed to read block 0x0: -5 [ 1386.858285][T22930] unable to read squashfs_super_block [ 1387.650496][T22924] F2FS-fs: inline encryption not supported [ 1387.656723][T22924] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1388.247334][T22924] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1388.267317][T22924] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1388.669450][T22924] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1388.802093][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4600'. [ 1388.811113][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4600'. [ 1388.820005][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4600'. [ 1390.366394][T22965] netlink: 'syz.2.4604': attribute type 1 has an invalid length. [ 1390.382291][T22965] gretap1: entered allmulticast mode [ 1390.773042][T22973] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4606'. [ 1390.782187][T22973] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4606'. [ 1391.073240][T22979] debugfs: Bad value for 'gid' [ 1391.078578][T22979] debugfs: Bad value for 'gid' [ 1391.742412][ T24] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1391.893190][T22992] tipc: Started in network mode [ 1391.898094][T22992] tipc: Node identity 4, cluster identity 4711 [ 1391.904564][T22992] tipc: Node number set to 4 [ 1391.988213][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1392.007548][ T24] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1392.017613][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.151522][ T24] usb 6-1: config 0 descriptor?? [ 1392.188123][ T24] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1392.210516][ T24] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1392.431113][ T5932] usb 6-1: USB disconnect, device number 64 [ 1392.845412][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1392.881077][T23000] ceph: No mds server is up or the cluster is laggy [ 1392.898056][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1393.921263][T23006] syzkaller1: entered promiscuous mode [ 1393.926793][T23006] syzkaller1: entered allmulticast mode [ 1396.040408][T23041] debugfs: Bad value for 'gid' [ 1396.045557][T23041] debugfs: Bad value for 'gid' [ 1399.223904][ T5996] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1399.485675][ T5996] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1399.517211][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.540264][ T5996] usb 3-1: Product: syz [ 1399.544452][ T5996] usb 3-1: Manufacturer: syz [ 1399.549793][T23087] overlayfs: failed to clone upperpath [ 1399.557564][ T5996] usb 3-1: SerialNumber: syz [ 1399.592533][ T5996] usb 3-1: config 0 descriptor?? [ 1399.623085][ T5996] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1399.646563][ T5996] pctv452e: pctv452e_power_ctrl: 1 [ 1399.646563][ T5996] [ 1399.646565][T23089] netlink: 212 bytes leftover after parsing attributes in process `syz.7.4638'. [ 1399.687460][ T5996] usb 3-1: selecting invalid altsetting 3 [ 1399.694867][ T5996] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1399.694867][ T5996] [ 1399.728735][ T5996] dvb-usb: bulk message failed: -22 (5/0) [ 1399.757509][ T5996] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1399.776877][ T5996] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1399.926233][ T5996] usb 3-1: USB disconnect, device number 94 [ 1401.308464][T23126] binder: 23114:23126 ioctl c018620c 200000000000 returned -1 [ 1401.452143][T23132] overlayfs: failed to clone upperpath [ 1401.459823][T23115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4648'. [ 1401.469910][T23132] netlink: 'syz.6.4653': attribute type 1 has an invalid length. [ 1401.659414][T23132] netlink: 'syz.6.4653': attribute type 1 has an invalid length. [ 1401.737507][T23133] ceph: No mds server is up or the cluster is laggy [ 1401.747076][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1402.124104][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1402.131251][T23127] ubi: mtd0 is already attached to ubi31 [ 1402.347851][T23139] exfat: Deprecated parameter 'namecase' [ 1402.353755][T23139] exFAT-fs (loop1): mounting with "discard" option, but the device does not support discard [ 1402.368486][T23139] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1402.382149][T23139] exFAT-fs (loop1): unable to read boot sector [ 1402.388405][T23139] exFAT-fs (loop1): failed to read boot sector [ 1402.414991][T23139] exFAT-fs (loop1): failed to recognize exfat type [ 1402.432810][T23139] overlayfs: failed to resolve '/?[ $ IlK)]E9jE)BP]Ky': -2 [ 1402.460458][T23139] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1402.471520][T23139] EXT4-fs (loop1): unable to read superblock [ 1402.766936][T10126] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.343063][T10126] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.403965][T12128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1403.414189][T12128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1403.422200][T12128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1403.453074][T12128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1403.461197][T12128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1403.506823][T10126] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.558681][T23155] lo speed is unknown, defaulting to 1000 [ 1403.573217][T23155] ip6gretap0 speed is unknown, defaulting to 1000 [ 1403.718022][T10126] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.236348][T10126] bridge_slave_1: left allmulticast mode [ 1405.267847][T10126] bridge_slave_1: left promiscuous mode [ 1405.280268][T10126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.322915][T10126] bridge_slave_0: left allmulticast mode [ 1405.333913][T10126] bridge_slave_0: left promiscuous mode [ 1405.348197][T10126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.033614][ T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1406.046459][T12128] Bluetooth: hci2: command tx timeout [ 1406.292856][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1406.313165][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1406.328700][ T24] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1406.346229][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1406.352988][ T24] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1406.366423][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.443534][ T24] usb 3-1: config 0 descriptor?? [ 1406.642589][T23190] input: syz0 as /devices/virtual/input/input39 [ 1406.709937][T23193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.737188][T23193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.792804][ T24] hid_parser_main: 59 callbacks suppressed [ 1406.792825][ T24] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x2 [ 1406.869395][ T24] gt683r_led 0003:1770:FF00.0019: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 1406.997146][ T24] usb 3-1: USB disconnect, device number 95 [ 1407.033759][T10722] gt683r_led 0003:1770:FF00.0019: failed to send set report request: -19 [ 1407.174561][T10126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.185145][T10126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.195240][T10126] bond0 (unregistering): Released all slaves [ 1407.302021][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1407.470881][T10126] tipc: Left network mode [ 1407.842174][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1408.374042][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1408.385702][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1408.385771][T12128] Bluetooth: hci2: command tx timeout [ 1408.510855][ T9] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1408.541669][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.672796][ T9] usb 6-1: Product: syz [ 1408.684230][ T9] usb 6-1: Manufacturer: syz [ 1408.697934][ T9] usb 6-1: SerialNumber: syz [ 1408.709433][ T9] usb 6-1: config 0 descriptor?? [ 1408.715152][T23198] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1409.292805][T23198] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1409.380405][ T9] usb 6-1: ucan: probing device on interface #0 [ 1409.739515][ T9] usb 6-1: ucan: device reported invalid device info [ 1409.750114][ T9] usb 6-1: ucan: probe failed; try to update the device firmware [ 1410.558115][T12128] Bluetooth: hci2: command tx timeout [ 1410.581592][T21355] usb 6-1: USB disconnect, device number 65 [ 1410.648970][T23155] chnl_net:caif_netlink_parms(): no params data found [ 1410.722377][T23244] 9pnet_fd: Insufficient options for proto=fd [ 1411.206830][T23251] ip6gretap0: entered promiscuous mode [ 1411.501828][T23155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.546332][T23155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.564820][T23155] bridge_slave_0: entered allmulticast mode [ 1411.598046][T23155] bridge_slave_0: entered promiscuous mode [ 1411.634093][T23155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.663590][T23155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.691235][T23155] bridge_slave_1: entered allmulticast mode [ 1411.710916][T23155] bridge_slave_1: entered promiscuous mode [ 1411.735412][T10126] hsr_slave_0: left promiscuous mode [ 1411.750263][T10126] hsr_slave_1: left promiscuous mode [ 1411.763714][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.771680][T10126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.785304][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.792850][T10126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.285861][T10126] veth1_macvtap: left promiscuous mode [ 1412.341730][T10126] veth0_macvtap: left promiscuous mode [ 1412.355620][T10126] veth1_vlan: left promiscuous mode [ 1412.372368][T10126] veth0_vlan: left promiscuous mode [ 1412.781519][T12128] Bluetooth: hci2: command tx timeout [ 1412.965120][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1413.003118][T23278] ceph: No mds server is up or the cluster is laggy [ 1413.415956][T23283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4692'. [ 1413.427867][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1414.246915][T23292] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4695'. [ 1414.521461][T10126] team0 (unregistering): Port device team_slave_1 removed [ 1414.587349][T10126] team0 (unregistering): Port device team_slave_0 removed [ 1415.450807][T23155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.479049][T23155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.584254][T23155] team0: Port device team_slave_0 added [ 1415.780025][T23155] team0: Port device team_slave_1 added [ 1415.835717][T23155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.436950][T23155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.462910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1416.550000][T23155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.586545][T23155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.604898][T23155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.640266][T23155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.746583][T23155] hsr_slave_0: entered promiscuous mode [ 1416.760150][T23318] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4703'. [ 1416.761151][T23155] hsr_slave_1: entered promiscuous mode [ 1416.776336][T23155] debugfs: 'hsr0' already exists in 'hsr' [ 1416.805660][T23155] Cannot create hsr debugfs directory [ 1417.995231][T23155] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1418.020655][T23155] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1418.056384][T23155] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1418.067357][T23329] vfat: Bad value for 'utf8' [ 1418.128531][T23155] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1419.295654][T23354] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4711'. [ 1419.304725][T23354] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4711'. [ 1419.361790][T23155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.563647][T23155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.595049][T15478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.602263][T15478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.698826][T15478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.706027][T15478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.268524][T23361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1420.302708][T23361] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1420.323985][T23361] EXT4-fs (loop5): unable to read superblock [ 1420.667863][T23372] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4715'. [ 1421.118111][T10722] libceph: connect (1)[c::]:6789 error -101 [ 1421.155898][T23378] ceph: No mds server is up or the cluster is laggy [ 1421.177045][T10722] libceph: mon0 (1)[c::]:6789 connect error [ 1421.505220][T23155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.199385][T23155] veth0_vlan: entered promiscuous mode [ 1422.211450][T23155] veth1_vlan: entered promiscuous mode [ 1422.270071][T23155] veth0_macvtap: entered promiscuous mode [ 1422.283794][T23155] veth1_macvtap: entered promiscuous mode [ 1422.375346][T23155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.411719][T23155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1422.544165][T10131] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.554255][T10131] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.571241][T10131] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.651198][T23402] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4722'. [ 1422.661097][T23402] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4722'. [ 1423.159205][T10131] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.263356][T23405] ext4: Unknown parameter 'fsmagic' [ 1423.391603][T23410] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1423.406555][T23410] EXT4-fs (loop5): unable to read superblock [ 1423.431242][T15478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.502523][T23410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4724'. [ 1423.511647][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4724'. [ 1423.520565][T23410] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4724'. [ 1423.546603][T23410] exFAT-fs (loop5): mounting with "discard" option, but the device does not support discard [ 1423.556864][T23410] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1423.566232][T23410] exFAT-fs (loop5): unable to read boot sector [ 1423.572393][T23410] exFAT-fs (loop5): failed to read boot sector [ 1423.578524][T23410] exFAT-fs (loop5): failed to recognize exfat type [ 1423.606043][T15478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.616394][T10126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.670807][T10126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.248448][T23423] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4728'. [ 1424.328023][T23426] program syz.7.4728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1424.347977][T23426] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1424.477084][ T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1424.654648][T23431] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4729'. [ 1424.663806][T23431] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4729'. [ 1424.771728][ T9] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1424.796805][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.843444][ T9] usb 9-1: Product: syz [ 1424.856923][ T9] usb 9-1: Manufacturer: syz [ 1424.962067][ T9] usb 9-1: SerialNumber: syz [ 1425.026748][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4733'. [ 1425.035957][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4733'. [ 1425.045145][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4733'. [ 1425.270886][ T9] usb 9-1: config 0 descriptor?? [ 1425.317953][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1425.457811][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 1425.457811][ T9] [ 1425.465628][ T9] usb 9-1: selecting invalid altsetting 3 [ 1425.471608][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1425.471608][ T9] [ 1425.483849][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1425.501724][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1425.587088][T23440] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4734'. [ 1425.597430][T23440] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4734'. [ 1426.042382][ T9] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1426.095053][ T9] usb 9-1: USB disconnect, device number 2 [ 1426.257238][T23446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1426.482327][T23444] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1426.642841][T23454] debugfs: Bad value for 'gid' [ 1426.650806][T23452] fuse: Unknown parameter 'user_idx5@5ϬWQH[h@#cG~X_*RD6iەEָvèm Mf"g;|`s}z*B||00000000000000000000' [ 1426.667535][T23454] debugfs: Bad value for 'gid' [ 1427.580701][T23463] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4740'. [ 1428.066183][T23470] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1428.151642][T23472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4742'. [ 1428.560831][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 1428.560849][ T30] audit: type=1326 audit(1758398110.312:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23474 comm="syz.8.4745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5b7b8ec29 code=0x0 [ 1428.751934][T23483] 9pnet_fd: Insufficient options for proto=fd [ 1428.759024][T23478] udf: Bad value for 'volume' [ 1429.366567][T23495] vfat: Bad value for 'utf8' [ 1430.256163][ T5932] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1431.530295][T23521] __nla_validate_parse: 2 callbacks suppressed [ 1431.530339][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4759'. [ 1431.933315][T23524] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1432.009164][T23533] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1432.165643][T23533] EXT4-fs (loop5): unable to read superblock [ 1432.313430][T23535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4763'. [ 1432.322734][T23535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4763'. [ 1432.332421][T23535] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4763'. [ 1432.667911][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1432.676862][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1432.685701][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1432.759519][T23533] exFAT-fs (loop5): mounting with "discard" option, but the device does not support discard [ 1432.770229][T23533] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1432.779473][T23533] exFAT-fs (loop5): unable to read boot sector [ 1432.785624][T23533] exFAT-fs (loop5): failed to read boot sector [ 1432.791750][T23533] exFAT-fs (loop5): failed to recognize exfat type [ 1432.967247][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 1433.032885][T23548] debugfs: Bad value for 'gid' [ 1433.101525][T23548] debugfs: Bad value for 'gid' [ 1434.202767][T23553] netlink: 277 bytes leftover after parsing attributes in process `syz.8.4770'. [ 1435.123377][T23573] vfat: Bad value for 'utf8' [ 1435.278465][T20022] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1435.617659][ T24] IPVS: starting estimator thread 0... [ 1435.746364][T23587] IPVS: using max 29 ests per chain, 69600 per kthread [ 1435.761990][T20022] usb 9-1: Using ep0 maxpacket: 16 [ 1435.776522][T20022] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1435.803813][T20022] usb 9-1: config 2 has an invalid interface number: 119 but max is 0 [ 1435.819681][T20022] usb 9-1: config 2 has no interface number 0 [ 1435.825847][T20022] usb 9-1: config 2 interface 119 has no altsetting 0 [ 1435.848520][T20022] usb 9-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1435.871810][T20022] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.884710][T20022] usb 9-1: Product: syz [ 1435.888948][T20022] usb 9-1: Manufacturer: syz [ 1435.893597][T20022] usb 9-1: SerialNumber: syz [ 1436.138541][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4775'. [ 1436.147562][T23568] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4775'. [ 1436.624532][T23595] vlan0: left allmulticast mode [ 1436.632272][T23595] veth0_vlan: left allmulticast mode [ 1436.639694][T23595] vlan0: left promiscuous mode [ 1436.679084][T23568] team_slave_0: entered promiscuous mode [ 1436.684820][T23568] team_slave_1: entered promiscuous mode [ 1436.690858][T23568] macsec1: entered promiscuous mode [ 1436.696125][T23568] team0: entered promiscuous mode [ 1436.701889][T23568] macsec1: entered allmulticast mode [ 1436.707232][T23568] team0: entered allmulticast mode [ 1436.712358][T23568] team_slave_0: entered allmulticast mode [ 1436.719191][T23568] team_slave_1: entered allmulticast mode [ 1436.737368][ T24] ip6gretap0 speed is unknown, defaulting to 1000 [ 1436.746916][ T8768] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.747022][T20022] go7007 9-1:2.119: probe with driver go7007 failed with error -12 [ 1436.780703][ T24] syz2: Port: 1 Link DOWN [ 1436.789467][ T8768] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.791620][T20022] usb 9-1: USB disconnect, device number 3 [ 1436.843069][ T43] ip6gretap0 speed is unknown, defaulting to 1000 [ 1436.860113][ T8768] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.038347][T15477] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.627821][T23636] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1438.791822][T23643] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4793'. [ 1438.895644][T23643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4793'. [ 1438.941582][T23643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4793'. [ 1439.166154][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1439.241559][T23661] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1439.261905][T23660] netlink: 'syz.1.4798': attribute type 3 has an invalid length. [ 1439.283964][T23661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1439.304646][T23661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1439.451733][T23667] block nbd2: not configured, cannot reconfigure [ 1439.497538][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1439.504416][ T9] usb 6-1: config 0 has an invalid interface number: 137 but max is 0 [ 1439.521957][ T9] usb 6-1: config 0 has no interface number 0 [ 1439.573961][ T9] usb 6-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1439.702665][ T9] usb 6-1: config 0 interface 137 has no altsetting 0 [ 1440.345781][ T9] usb 6-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 1440.355063][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.391701][ T9] usb 6-1: Product: syz [ 1440.400556][ T9] usb 6-1: Manufacturer: syz [ 1441.400204][ T9] usb 6-1: SerialNumber: syz [ 1441.465442][ T9] usb 6-1: config 0 descriptor?? [ 1441.469605][T23608] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1441.509250][ T9] ftdi_sio 6-1:0.137: FTDI USB Serial Device converter detected [ 1441.599017][ T9] usb 6-1: Detected SIO [ 1441.606608][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 1441.646398][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1441.688842][T23608] usb 3-1: Using ep0 maxpacket: 32 [ 1441.719287][T23608] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 1441.739350][T23608] usb 3-1: config 0 has no interface number 0 [ 1441.760061][T23608] usb 3-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1441.783262][T23608] usb 3-1: config 0 interface 137 has no altsetting 0 [ 1441.794802][T23687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1441.815881][T23608] usb 3-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 1441.825809][T23608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.835984][T23608] usb 3-1: Product: syz [ 1441.843262][T23608] usb 3-1: Manufacturer: syz [ 1441.843331][T23682] lo speed is unknown, defaulting to 1000 [ 1441.847920][T23608] usb 3-1: SerialNumber: syz [ 1441.863330][T23687] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1441.870237][T23608] usb 3-1: config 0 descriptor?? [ 1441.882686][T23608] ftdi_sio 3-1:0.137: FTDI USB Serial Device converter detected [ 1441.901611][T23682] ip6gretap0 speed is unknown, defaulting to 1000 [ 1441.910260][T23608] usb 3-1: Detected SIO [ 1441.914623][T23608] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 8 [ 1441.933115][T23608] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1441.966185][T23687] EXT4-fs (loop7): unable to read superblock [ 1442.350309][T23691] netlink: 212 bytes leftover after parsing attributes in process `syz.7.4808'. [ 1442.635266][T23700] vfat: Bad value for 'utf8' [ 1442.670182][T23703] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1442.679861][T23703] FAT-fs (loop1): unable to read boot sector [ 1442.817399][ T9] usb 6-1: USB disconnect, device number 67 [ 1442.835045][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1443.009996][ T9] ftdi_sio 6-1:0.137: device disconnected [ 1443.468718][T23717] comedi comedi3: c6xdigio: I/O port conflict (0x401,3) [ 1443.934543][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1443.958034][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1444.217384][T20022] usb 3-1: USB disconnect, device number 96 [ 1444.249313][T20022] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1444.280574][T20022] ftdi_sio 3-1:0.137: device disconnected [ 1444.449117][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4820'. [ 1444.857024][T23731] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4822'. [ 1445.083732][T23736] netlink: 'syz.1.4821': attribute type 3 has an invalid length. [ 1445.210384][T23741] vfat: Bad value for 'utf8' [ 1445.771622][T23749] ceph: No mds server is up or the cluster is laggy [ 1445.787310][T23608] libceph: connect (1)[c::]:6789 error -101 [ 1445.794749][T23608] libceph: mon0 (1)[c::]:6789 connect error [ 1446.267890][T10722] libceph: connect (1)[c::]:6789 error -101 [ 1446.280137][T10722] libceph: mon0 (1)[c::]:6789 connect error [ 1446.735666][T23754] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1446.742176][T23754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1446.813869][T23754] vhci_hcd vhci_hcd.0: Device attached [ 1447.334683][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1447.524691][T23772] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4833'. [ 1447.544824][T23772] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4833'. [ 1447.564778][T23772] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4833'. [ 1447.585144][T23772] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4833'. [ 1447.600946][T23772] netlink: 'syz.7.4833': attribute type 6 has an invalid length. [ 1447.632845][T10722] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1447.840631][T10722] usb 6-1: config 0 has no interfaces? [ 1447.853026][T10722] usb 6-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 1447.859199][T23778] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4835'. [ 1447.879917][T10722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.898940][T10722] usb 6-1: config 0 descriptor?? [ 1448.210452][ T5932] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1448.273248][T23782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4836'. [ 1448.282378][T23782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4836'. [ 1448.543754][T10722] usb 6-1: USB disconnect, device number 68 [ 1448.734574][T23758] vhci_hcd: connection closed [ 1448.746132][T10131] vhci_hcd: stop threads [ 1448.755097][T10131] vhci_hcd: release socket [ 1448.755636][ T9] usb 43-1: device descriptor read/64, error -71 [ 1448.774381][T10131] vhci_hcd: disconnect device [ 1448.951294][ T5932] usb 9-1: Using ep0 maxpacket: 8 [ 1448.960233][ T5932] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1448.971066][ T5932] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1448.988836][ T5932] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1449.002042][ T5932] usb 9-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1449.011322][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.019980][ T5932] usb 9-1: Product: syz [ 1449.024359][ T9] vhci_hcd: vhci_device speed not set [ 1449.030175][ T5932] usb 9-1: Manufacturer: syz [ 1449.034936][ T5932] usb 9-1: SerialNumber: syz [ 1449.653593][T23776] fuse: Bad value for 'fd' [ 1449.715084][T23804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4842'. [ 1449.733301][ T5932] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input40 [ 1449.778748][ T5218] bcm5974 9-1:1.0: could not read from device [ 1449.855331][ T5932] usb 9-1: USB disconnect, device number 4 [ 1449.861850][ T5218] bcm5974 9-1:1.0: could not read from device [ 1450.231109][T23819] netlink: 'syz.5.4846': attribute type 3 has an invalid length. [ 1450.347223][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4848'. [ 1451.039048][T23830] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4849'. [ 1451.048229][T23830] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4849'. [ 1451.118611][T10722] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1452.323129][T10722] usb 3-1: config 252 has an invalid interface number: 254 but max is 0 [ 1452.380139][T10722] usb 3-1: config 252 has no interface number 0 [ 1452.411223][T10722] usb 3-1: config 252 interface 254 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1452.454123][T10722] usb 3-1: config 252 interface 254 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 1452.500309][T10722] usb 3-1: config 252 interface 254 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1452.537872][T10722] usb 3-1: config 252 interface 254 has no altsetting 0 [ 1452.573587][T10722] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1452.713687][T10722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.859692][T10722] usb 3-1: Product: syz [ 1452.864504][T10722] usb 3-1: Manufacturer: syz [ 1452.869108][T10722] usb 3-1: SerialNumber: syz [ 1452.885533][T10722] bfusb 3-1:252.254: probe with driver bfusb failed with error -5 [ 1453.019345][T23842] devpts: Unknown parameter 'zҔĞ' [ 1453.081647][T23843] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1453.106669][T23843] EXT4-fs (loop5): unable to read superblock [ 1455.881772][T23608] usb 3-1: USB disconnect, device number 97 [ 1455.887558][ T5932] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1456.069363][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 1456.076262][ T5932] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1456.085968][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.128708][ T5932] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1456.138466][ T5932] pvrusb2: ********** [ 1456.154149][ T5932] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1456.165099][ T5932] pvrusb2: Important functionality might not be entirely working. [ 1456.172908][ T5932] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1456.196595][ T5932] pvrusb2: ********** [ 1456.333934][ T2344] pvrusb2: Invalid write control endpoint [ 1456.625124][T23883] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4863'. [ 1456.708875][ T5932] usb 2-1: USB disconnect, device number 93 [ 1456.895269][ T2344] pvrusb2: Invalid write control endpoint [ 1456.910313][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1456.938991][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1456.949357][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1456.961957][ T2344] pvrusb2: Device being rendered inoperable [ 1456.972471][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1456.980652][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1457.045849][T23892] netlink: 'syz.2.4864': attribute type 3 has an invalid length. [ 1457.082354][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1457.191560][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1457.204333][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1457.511475][T23604] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1457.983061][T23604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.124278][T23604] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.238130][T23604] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1458.739713][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4869'. [ 1458.761959][T23604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.775711][T23604] usb 6-1: config 0 descriptor?? [ 1459.372617][T23604] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 1459.391846][T23604] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 1459.412850][T23604] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 1459.423952][T23604] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 1459.432551][T23604] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 1459.451752][T23604] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 1459.468622][T23604] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 1459.481697][T23604] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1459.590999][T23604] cp2112 0003:10C4:EA90.001A: error requesting version [ 1459.816654][T23604] cp2112 0003:10C4:EA90.001A: probe with driver cp2112 failed with error -5 [ 1460.673357][T23928] udf: Unknown parameter '18446744073709551615' [ 1460.997189][T23934] xfs: Unknown parameter 'fowner>00000000000000000000' [ 1461.053827][T23896] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1461.063547][T23896] FAT-fs (loop5): unable to read boot sector [ 1462.356527][T23604] usb 6-1: USB disconnect, device number 69 [ 1462.430812][T23954] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1462.446776][T23954] EXT4-fs (loop8): unable to read superblock [ 1463.003603][T23960] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1463.016980][T23960] EXT4-fs (loop7): unable to read superblock [ 1463.208748][T23965] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4884'. [ 1463.218210][T23965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4884'. [ 1463.227617][T23965] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4884'. [ 1463.322804][T23964] exFAT-fs (loop7): mounting with "discard" option, but the device does not support discard [ 1463.333507][T23964] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1463.342823][T23964] exFAT-fs (loop7): unable to read boot sector [ 1463.349087][T23964] exFAT-fs (loop7): failed to read boot sector [ 1463.355255][T23964] exFAT-fs (loop7): failed to recognize exfat type [ 1463.456175][T20022] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1464.293267][T20022] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.323163][T20022] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1464.347142][T20022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.466344][T20022] usb 6-1: config 0 descriptor?? [ 1464.494114][T23975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4887'. [ 1464.516058][T20022] pwc: Askey VC010 type 2 USB webcam detected. [ 1464.574219][T23985] netlink: 212 bytes leftover after parsing attributes in process `syz.8.4891'. [ 1465.553423][T23605] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1465.958700][T20022] pwc: recv_control_msg error -71 req 04 val 1000 [ 1466.069172][T20022] pwc: recv_control_msg error -71 req 04 val 1300 [ 1466.076362][T23605] usb 9-1: config 252 has an invalid interface number: 254 but max is 0 [ 1466.076631][T20022] pwc: recv_control_msg error -71 req 04 val 1400 [ 1466.109786][T20022] pwc: recv_control_msg error -71 req 02 val 2000 [ 1466.112710][T23605] usb 9-1: config 252 has no interface number 0 [ 1466.151160][T23605] usb 9-1: config 252 interface 254 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1466.153279][T20022] pwc: recv_control_msg error -71 req 02 val 2100 [ 1466.179134][T23605] usb 9-1: config 252 interface 254 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 1466.192448][T20022] pwc: recv_control_msg error -71 req 04 val 1500 [ 1466.196650][T23605] usb 9-1: config 252 interface 254 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1466.206350][T20022] pwc: recv_control_msg error -71 req 02 val 2500 [ 1466.209393][T23605] usb 9-1: config 252 interface 254 has no altsetting 0 [ 1466.226300][T23605] usb 9-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1466.226672][T20022] pwc: recv_control_msg error -71 req 02 val 2400 [ 1466.235996][T23605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.236019][T23605] usb 9-1: Product: syz [ 1466.236033][T23605] usb 9-1: Manufacturer: syz [ 1466.242834][T24008] vfat: Bad value for 'utf8' [ 1466.251131][T23605] usb 9-1: SerialNumber: syz [ 1466.288320][T20022] pwc: recv_control_msg error -71 req 02 val 2600 [ 1466.295178][T23605] bfusb 9-1:252.254: probe with driver bfusb failed with error -5 [ 1466.295262][T20022] pwc: recv_control_msg error -71 req 02 val 2900 [ 1466.353066][T20022] pwc: recv_control_msg error -71 req 02 val 2800 [ 1466.361355][T20022] pwc: recv_control_msg error -71 req 04 val 1100 [ 1466.371031][T20022] pwc: recv_control_msg error -71 req 04 val 1200 [ 1466.798681][T24017] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1466.800674][T20022] pwc: Registered as video103. [ 1466.819324][T24017] EXT4-fs (loop2): unable to read superblock [ 1466.842157][T20022] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41 [ 1466.869431][T20022] usb 6-1: USB disconnect, device number 70 [ 1467.641014][T24017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4901'. [ 1467.650692][T24017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4901'. [ 1467.659673][T24017] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4901'. [ 1467.737450][T24017] exFAT-fs (loop2): mounting with "discard" option, but the device does not support discard [ 1467.747877][T24017] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1467.757145][T24017] exFAT-fs (loop2): unable to read boot sector [ 1467.763307][T24017] exFAT-fs (loop2): failed to read boot sector [ 1467.769435][T24017] exFAT-fs (loop2): failed to recognize exfat type [ 1469.030366][T24032] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1469.208605][T24032] qnx6: wrong signature (magic) in superblock #1. [ 1469.213280][T24036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4905'. [ 1469.455217][T24032] qnx6: unable to read the first superblock [ 1469.883316][T24046] fuse: Unknown parameter './file0' [ 1471.277930][T24066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.291164][T24066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.763763][ T5932] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1471.945508][T24070] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1472.006750][ T9] usb 9-1: USB disconnect, device number 5 [ 1472.051353][T24073] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4918'. [ 1472.073733][T24073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4918'. [ 1472.090301][T24073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4918'. [ 1472.112944][T24075] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4920'. [ 1472.127155][T24075] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4920'. [ 1472.142846][T23857] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.154760][T24075] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4920'. [ 1472.248135][T23857] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.341245][T23857] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.425407][T20022] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1472.597051][T23857] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.601602][T24086] vfat: Bad value for 'utf8' [ 1473.208998][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1473.338399][T20022] usb 2-1: Using ep0 maxpacket: 32 [ 1473.369992][T20022] usb 2-1: config 0 has an invalid interface number: 137 but max is 0 [ 1473.382627][T20968] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1473.400859][T20968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1473.412513][T20022] usb 2-1: config 0 has no interface number 0 [ 1473.419507][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1473.425274][T20968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1473.433994][T20968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1473.442191][T20968] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1473.449322][ T9] usb 9-1: config 0 has an invalid interface number: 137 but max is 0 [ 1473.472061][ T9] usb 9-1: config 0 has no interface number 0 [ 1473.479998][T20022] usb 2-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1473.490471][ T9] usb 9-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1473.515314][T20022] usb 2-1: config 0 interface 137 has no altsetting 0 [ 1473.522220][ T9] usb 9-1: config 0 interface 137 has no altsetting 0 [ 1473.534335][T20022] usb 2-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 1473.546625][T20022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.556208][T20022] usb 2-1: Product: syz [ 1473.560929][ T9] usb 9-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 1473.570284][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.578270][ T9] usb 9-1: Product: syz [ 1473.583382][T20022] usb 2-1: Manufacturer: syz [ 1473.587985][T20022] usb 2-1: SerialNumber: syz [ 1473.592873][ T9] usb 9-1: Manufacturer: syz [ 1473.597467][ T9] usb 9-1: SerialNumber: syz [ 1473.605705][T20022] usb 2-1: config 0 descriptor?? [ 1473.623273][T20022] ftdi_sio 2-1:0.137: FTDI USB Serial Device converter detected [ 1473.641492][ T9] usb 9-1: config 0 descriptor?? [ 1473.657884][T20022] usb 2-1: Detected SIO [ 1473.662249][T20022] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 1473.670587][ T9] ftdi_sio 9-1:0.137: FTDI USB Serial Device converter detected [ 1474.022266][T20022] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1474.094845][ T9] usb 9-1: Detected SIO [ 1474.099028][ T9] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 8 [ 1474.100661][T23857] team0: left allmulticast mode [ 1474.119656][ T9] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1474.149704][T23857] team_slave_0: left allmulticast mode [ 1474.157630][T23857] team_slave_1: left allmulticast mode [ 1474.165098][ T9] usb 9-1: USB disconnect, device number 6 [ 1474.172065][T23857] team0: left promiscuous mode [ 1474.178154][T23857] team_slave_0: left promiscuous mode [ 1474.186795][ T9] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1474.197344][T23857] bridge0: port 3(team0) entered disabled state [ 1474.210781][ T9] ftdi_sio 9-1:0.137: device disconnected [ 1474.243845][T23857] bridge_slave_1: left allmulticast mode [ 1474.251231][T23857] bridge_slave_1: left promiscuous mode [ 1474.258629][T23857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.273172][T23857] bridge_slave_0: left allmulticast mode [ 1474.290117][T23857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.693682][T24111] ceph: No mds server is up or the cluster is laggy [ 1474.707264][T23608] libceph: connect (1)[c::]:6789 error -101 [ 1474.708458][T23608] libceph: mon0 (1)[c::]:6789 connect error [ 1475.006923][T23857] dvmrp1 (unregistering): left allmulticast mode [ 1475.292061][T12139] usb 2-1: USB disconnect, device number 94 [ 1475.332920][T12139] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1475.367863][T12139] ftdi_sio 2-1:0.137: device disconnected [ 1475.464694][ T5996] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1475.470322][T24126] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.483040][T24126] FAT-fs (loop5): unable to read boot sector [ 1475.646304][ T5996] usb 9-1: config 45 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1475.687710][T23857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1475.699723][ T5996] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1475.709791][ T5996] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.718794][ T5996] usb 9-1: Product: syz [ 1475.724836][ T5996] usb 9-1: Manufacturer: syz [ 1475.725197][T23857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1475.730121][T20968] Bluetooth: hci0: command tx timeout [ 1475.749352][ T5996] usb 9-1: SerialNumber: syz [ 1476.148580][T23857] bond0 (unregistering): Released all slaves [ 1476.185203][T23857] bond1 (unregistering): Released all slaves [ 1476.227755][ T5996] usb 9-1: USB disconnect, device number 7 [ 1476.308373][T19315] udevd[19315]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:45.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1476.411409][T23857] bond2 (unregistering): Released all slaves [ 1476.417496][ T5932] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1476.441756][T23857] bond3 (unregistering): Released all slaves [ 1476.454353][T23857] bond4 (unregistering): Released all slaves [ 1476.473153][T24090] lo speed is unknown, defaulting to 1000 [ 1476.494853][T24090] ip6gretap0 speed is unknown, defaulting to 1000 [ 1476.542774][T23857] tipc: Left network mode [ 1476.559016][T24118] lo speed is unknown, defaulting to 1000 [ 1476.573562][T23857] IPVS: stopping master sync thread 21783 ... [ 1476.605950][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 1476.633276][ T5932] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.665282][ T5932] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.686325][ T5932] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1476.696755][ T5932] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1476.719769][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.743947][ T5932] usb 6-1: config 0 descriptor?? [ 1477.020485][T24132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.031287][T24132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.390874][ T5996] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1477.470172][T24118] ip6gretap0 speed is unknown, defaulting to 1000 [ 1477.886619][T24090] chnl_net:caif_netlink_parms(): no params data found [ 1477.962407][T20968] Bluetooth: hci0: command tx timeout [ 1478.075718][T24138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1478.083245][T24138] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1478.094774][T24138] EXT4-fs (loop8): unable to read superblock [ 1478.168501][T24138] Bluetooth: MGMT ver 1.23 [ 1479.405145][ T5932] usbhid 6-1:0.0: can't add hid device: -71 [ 1479.491007][ T5932] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1479.764444][ T5932] usb 6-1: USB disconnect, device number 71 [ 1479.810038][T23857] hsr_slave_0: left promiscuous mode [ 1479.851675][T23857] hsr_slave_1: left promiscuous mode [ 1479.857996][T23857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.865574][T23857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.956529][T23857] veth1_macvtap: left promiscuous mode [ 1479.963772][T23857] veth0_macvtap: left promiscuous mode [ 1479.969639][T23857] veth1_vlan: left promiscuous mode [ 1479.976604][T23857] veth0_vlan: left promiscuous mode [ 1480.228787][T20968] Bluetooth: hci0: command tx timeout [ 1481.288392][T23857] team0 (unregistering): Port device team_slave_1 removed [ 1481.334336][T23857] team0 (unregistering): Port device team_slave_0 removed [ 1481.580669][T24164] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4941'. [ 1481.593749][T24164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4941'. [ 1481.604014][T24164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4941'. [ 1481.861367][T24090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.869539][T24090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.877092][T24090] bridge_slave_0: entered allmulticast mode [ 1481.901182][T24090] bridge_slave_0: entered promiscuous mode [ 1481.918612][T24090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.926220][T24090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.949919][T24090] bridge_slave_1: entered allmulticast mode [ 1481.962602][T24090] bridge_slave_1: entered promiscuous mode [ 1482.015044][T10722] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1482.184911][T10722] usb 2-1: Using ep0 maxpacket: 32 [ 1482.247163][T10722] usb 2-1: config 0 has an invalid interface number: 137 but max is 0 [ 1482.257750][T24090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.275483][T10722] usb 2-1: config 0 has no interface number 0 [ 1482.301295][T10722] usb 2-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1482.315778][T24090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.332593][T10722] usb 2-1: config 0 interface 137 has no altsetting 0 [ 1482.344988][T10722] usb 2-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 1482.376628][T10722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.386210][T10722] usb 2-1: Product: syz [ 1482.390621][T10722] usb 2-1: Manufacturer: syz [ 1482.395304][T10722] usb 2-1: SerialNumber: syz [ 1482.399059][T20968] Bluetooth: hci0: command tx timeout [ 1482.456630][T24090] team0: Port device team_slave_0 added [ 1482.467074][T24090] team0: Port device team_slave_1 added [ 1482.477887][T24171] netlink: 'syz.8.4943': attribute type 3 has an invalid length. [ 1482.569378][T10722] usb 2-1: config 0 descriptor?? [ 1482.585814][T10722] ftdi_sio 2-1:0.137: FTDI USB Serial Device converter detected [ 1482.608871][T10722] usb 2-1: Detected SIO [ 1482.613574][T10722] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 1482.835152][T10722] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1482.884837][T24090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.893751][T24090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.075610][T24090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.796848][T24090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.814532][T24090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.843145][T24090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.799762][T10722] usb 2-1: USB disconnect, device number 95 [ 1484.850605][T10722] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1484.927876][T24178] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1484.937595][T10722] ftdi_sio 2-1:0.137: device disconnected [ 1485.063321][ T5996] ip6gretap0 speed is unknown, defaulting to 1000 [ 1485.071112][ T5996] syz2: Port: 1 Link ACTIVE [ 1485.133061][T23608] ip6gretap0 speed is unknown, defaulting to 1000 [ 1485.151070][T24090] hsr_slave_0: entered promiscuous mode [ 1485.174914][T24090] hsr_slave_1: entered promiscuous mode [ 1486.488781][T24215] comedi comedi3: c6xdigio: I/O port conflict (0x401,3) [ 1486.496114][T24215] ================================================================== [ 1486.504175][T24215] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x3d/0x70 [ 1486.512144][T24215] Read of size 8 at addr ffff88807c65d430 by task syz.2.4953/24215 [ 1486.520011][T24215] [ 1486.522329][T24215] CPU: 0 UID: 0 PID: 24215 Comm: syz.2.4953 Not tainted syzkaller #0 PREEMPT(full) [ 1486.522351][T24215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1486.522362][T24215] Call Trace: [ 1486.522369][T24215] [ 1486.522375][T24215] dump_stack_lvl+0x189/0x250 [ 1486.522391][T24215] ? __virt_addr_valid+0x1c8/0x5c0 [ 1486.522406][T24215] ? rcu_is_watching+0x15/0xb0 [ 1486.522432][T24215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1486.522450][T24215] ? rcu_is_watching+0x15/0xb0 [ 1486.522474][T24215] ? lock_release+0x4b/0x3e0 [ 1486.522488][T24215] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1486.522499][T24215] ? __virt_addr_valid+0x1c8/0x5c0 [ 1486.522510][T24215] ? __virt_addr_valid+0x4a5/0x5c0 [ 1486.522520][T24215] print_report+0xca/0x240 [ 1486.522530][T24215] ? sysfs_remove_file_ns+0x3d/0x70 [ 1486.522540][T24215] kasan_report+0x118/0x150 [ 1486.522551][T24215] ? sysfs_remove_file_ns+0x3d/0x70 [ 1486.522563][T24215] sysfs_remove_file_ns+0x3d/0x70 [ 1486.522573][T24215] bus_remove_driver+0x198/0x2f0 [ 1486.522586][T24215] comedi_device_detach_locked+0x178/0x750 [ 1486.522602][T24215] comedi_device_attach+0x5d4/0x720 [ 1486.522617][T24215] comedi_unlocked_ioctl+0x5ff/0x1020 [ 1486.522628][T24215] ? kasan_quarantine_put+0xdd/0x220 [ 1486.522653][T24215] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1486.522680][T24215] ? rcu_is_watching+0x15/0xb0 [ 1486.522726][T24215] ? __fget_files+0x2a/0x420 [ 1486.522740][T24215] ? __fget_files+0x3a0/0x420 [ 1486.522749][T24215] ? __fget_files+0x2a/0x420 [ 1486.522760][T24215] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1486.522771][T24215] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1486.522782][T24215] __se_sys_ioctl+0xfc/0x170 [ 1486.522796][T24215] do_syscall_64+0xfa/0xfa0 [ 1486.522807][T24215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.522817][T24215] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1486.522826][T24215] ? clear_bhb_loop+0x60/0xb0 [ 1486.522837][T24215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.522846][T24215] RIP: 0033:0x7f063c78ec29 [ 1486.522857][T24215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1486.522866][T24215] RSP: 002b:00007f063d6d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1486.522877][T24215] RAX: ffffffffffffffda RBX: 00007f063c9d6090 RCX: 00007f063c78ec29 [ 1486.522885][T24215] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000009 [ 1486.522891][T24215] RBP: 00007f063c811e41 R08: 0000000000000000 R09: 0000000000000000 [ 1486.522897][T24215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1486.522903][T24215] R13: 00007f063c9d6128 R14: 00007f063c9d6090 R15: 00007ffc425d9668 [ 1486.522914][T24215] [ 1486.522919][T24215] [ 1486.787359][T24215] Allocated by task 20022: [ 1486.791756][T24215] kasan_save_track+0x3e/0x80 [ 1486.796426][T24215] __kasan_kmalloc+0x93/0xb0 [ 1486.800997][T24215] __kvmalloc_node_noprof+0x5cd/0x910 [ 1486.806352][T24215] v4l2_ctrl_new+0x9d5/0x1790 [ 1486.811013][T24215] v4l2_ctrl_new_custom+0x57c/0x7b0 [ 1486.816190][T24215] pwc_init_controls+0x51b/0x17d0 [ 1486.821201][T24215] usb_pwc_probe+0x11df/0x1b30 [ 1486.825950][T24215] usb_probe_interface+0x668/0xc30 [ 1486.831042][T24215] really_probe+0x26d/0x9e0 [ 1486.835527][T24215] __driver_probe_device+0x18c/0x2f0 [ 1486.840795][T24215] driver_probe_device+0x4f/0x430 [ 1486.845799][T24215] __device_attach_driver+0x2ce/0x530 [ 1486.851154][T24215] bus_for_each_drv+0x251/0x2e0 [ 1486.855985][T24215] __device_attach+0x2b8/0x400 [ 1486.860730][T24215] bus_probe_device+0x185/0x260 [ 1486.865564][T24215] device_add+0x7b6/0xb50 [ 1486.869875][T24215] usb_set_configuration+0x1a87/0x20e0 [ 1486.875313][T24215] usb_generic_driver_probe+0x8d/0x150 [ 1486.880748][T24215] usb_probe_device+0x1c4/0x390 [ 1486.885576][T24215] really_probe+0x26d/0x9e0 [ 1486.890063][T24215] __driver_probe_device+0x18c/0x2f0 [ 1486.895330][T24215] driver_probe_device+0x4f/0x430 [ 1486.900338][T24215] __device_attach_driver+0x2ce/0x530 [ 1486.905694][T24215] bus_for_each_drv+0x251/0x2e0 [ 1486.910523][T24215] __device_attach+0x2b8/0x400 [ 1486.915268][T24215] bus_probe_device+0x185/0x260 [ 1486.920097][T24215] device_add+0x7b6/0xb50 [ 1486.924404][T24215] usb_new_device+0xa39/0x16f0 [ 1486.929153][T24215] hub_event+0x2958/0x4a20 [ 1486.933547][T24215] process_scheduled_works+0xae1/0x17b0 [ 1486.939077][T24215] worker_thread+0x8a0/0xda0 [ 1486.943648][T24215] kthread+0x711/0x8a0 [ 1486.947701][T24215] ret_from_fork+0x4bc/0x870 [ 1486.952272][T24215] ret_from_fork_asm+0x1a/0x30 [ 1486.957017][T24215] [ 1486.959319][T24215] Freed by task 20022: [ 1486.963361][T24215] kasan_save_track+0x3e/0x80 [ 1486.968024][T24215] __kasan_save_free_info+0x46/0x50 [ 1486.973202][T24215] __kasan_slab_free+0x5c/0x80 [ 1486.977943][T24215] kfree+0x19a/0x6d0 [ 1486.981818][T24215] v4l2_ctrl_handler_free+0x59f/0x680 [ 1486.987171][T24215] pwc_video_release+0x22/0x70 [ 1486.991917][T24215] v4l2_device_put+0x81/0xd0 [ 1486.996494][T24215] usb_unbind_interface+0x26e/0x910 [ 1487.001679][T24215] device_release_driver_internal+0x4d9/0x800 [ 1487.007727][T24215] bus_remove_device+0x34d/0x410 [ 1487.012644][T24215] device_del+0x511/0x8e0 [ 1487.016956][T24215] usb_disable_device+0x3e9/0x8a0 [ 1487.021962][T24215] usb_disconnect+0x330/0x950 [ 1487.026652][T24215] hub_event+0x1cf5/0x4a20 [ 1487.031055][T24215] process_scheduled_works+0xae1/0x17b0 [ 1487.036584][T24215] worker_thread+0x8a0/0xda0 [ 1487.041156][T24215] kthread+0x711/0x8a0 [ 1487.045204][T24215] ret_from_fork+0x4bc/0x870 [ 1487.049779][T24215] ret_from_fork_asm+0x1a/0x30 [ 1487.054525][T24215] [ 1487.056826][T24215] The buggy address belongs to the object at ffff88807c65d400 [ 1487.056826][T24215] which belongs to the cache kmalloc-256 of size 256 [ 1487.070855][T24215] The buggy address is located 48 bytes inside of [ 1487.070855][T24215] freed 256-byte region [ffff88807c65d400, ffff88807c65d500) [ 1487.084540][T24215] [ 1487.086845][T24215] The buggy address belongs to the physical page: [ 1487.093248][T24215] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c65c [ 1487.101984][T24215] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1487.110461][T24215] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1487.117992][T24215] page_type: f5(slab) [ 1487.121952][T24215] raw: 00fff00000000040 ffff88801ac41b40 ffffea0005300d00 dead000000000006 [ 1487.130512][T24215] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1487.139073][T24215] head: 00fff00000000040 ffff88801ac41b40 ffffea0005300d00 dead000000000006 [ 1487.147724][T24215] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1487.156372][T24215] head: 00fff00000000001 ffffea0001f19701 00000000ffffffff 00000000ffffffff [ 1487.165020][T24215] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1487.173665][T24215] page dumped because: kasan: bad access detected [ 1487.180059][T24215] page_owner tracks the page as allocated [ 1487.185751][T24215] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5869, tgid 5869 (syz-executor), ts 80384347405, free_ts 80292513120 [ 1487.207087][T24215] post_alloc_hook+0x240/0x2a0 [ 1487.211840][T24215] get_page_from_freelist+0x21e4/0x22c0 [ 1487.217362][T24215] __alloc_frozen_pages_noprof+0x181/0x370 [ 1487.223145][T24215] alloc_pages_mpol+0x232/0x4a0 [ 1487.227972][T24215] allocate_slab+0x96/0x3a0 [ 1487.232459][T24215] ___slab_alloc+0xe94/0x1920 [ 1487.237114][T24215] __slab_alloc+0x65/0x100 [ 1487.241510][T24215] __kmalloc_noprof+0x471/0x7f0 [ 1487.246343][T24215] fib_create_info+0x172d/0x3210 [ 1487.251258][T24215] fib_table_insert+0xc6/0x1b50 [ 1487.256088][T24215] fib_magic+0x2c4/0x390 [ 1487.260314][T24215] fib_add_ifaddr+0x144/0x5f0 [ 1487.264971][T24215] fib_inetaddr_event+0x12e/0x190 [ 1487.269973][T24215] notifier_call_chain+0x1b6/0x3e0 [ 1487.275061][T24215] blocking_notifier_call_chain+0x6a/0x90 [ 1487.280756][T24215] __inet_insert_ifa+0xa13/0xbf0 [ 1487.285675][T24215] page last free pid 5862 tgid 5862 stack trace: [ 1487.291974][T24215] __free_frozen_pages+0xbc4/0xd30 [ 1487.297068][T24215] __put_partials+0x146/0x170 [ 1487.301726][T24215] put_cpu_partial+0x1f2/0x2e0 [ 1487.306467][T24215] __slab_free+0x2b9/0x390 [ 1487.310865][T24215] qlist_free_all+0x97/0x140 [ 1487.315439][T24215] kasan_quarantine_reduce+0x148/0x160 [ 1487.320883][T24215] __kasan_slab_alloc+0x22/0x80 [ 1487.325714][T24215] __kmalloc_cache_noprof+0x36f/0x6f0 [ 1487.331068][T24215] kernfs_fop_open+0x397/0xca0 [ 1487.335808][T24215] do_dentry_open+0x953/0x13f0 [ 1487.340550][T24215] vfs_open+0x3b/0x340 [ 1487.344599][T24215] path_openat+0x2ee5/0x3830 [ 1487.349168][T24215] do_filp_open+0x1fa/0x410 [ 1487.353652][T24215] do_sys_openat2+0x121/0x1c0 [ 1487.358311][T24215] __x64_sys_openat+0x138/0x170 [ 1487.363139][T24215] do_syscall_64+0xfa/0xfa0 [ 1487.367627][T24215] [ 1487.369932][T24215] Memory state around the buggy address: [ 1487.375538][T24215] ffff88807c65d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1487.383577][T24215] ffff88807c65d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1487.391616][T24215] >ffff88807c65d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1487.399658][T24215] ^ [ 1487.405267][T24215] ffff88807c65d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1487.413305][T24215] ffff88807c65d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1487.421343][T24215] ================================================================== [ 1487.429500][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.439846][T24215] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1487.447043][T24215] CPU: 0 UID: 0 PID: 24215 Comm: syz.2.4953 Not tainted syzkaller #0 PREEMPT(full) [ 1487.456385][T24215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1487.466415][T24215] Call Trace: [ 1487.469675][T24215] [ 1487.472582][T24215] dump_stack_lvl+0x99/0x250 [ 1487.477148][T24215] ? __asan_memcpy+0x40/0x70 [ 1487.481716][T24215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1487.486888][T24215] ? __pfx__printk+0x10/0x10 [ 1487.491457][T24215] vpanic+0x237/0x6d0 [ 1487.495414][T24215] ? __pfx_vpanic+0x10/0x10 [ 1487.499890][T24215] ? preempt_schedule+0xae/0xc0 [ 1487.504720][T24215] panic+0xb9/0xc0 [ 1487.508414][T24215] ? __pfx_panic+0x10/0x10 [ 1487.512802][T24215] ? sysfs_remove_file_ns+0x3d/0x70 [ 1487.517975][T24215] ? __pfx_panic+0x10/0x10 [ 1487.522363][T24215] ? sysfs_remove_file_ns+0x3d/0x70 [ 1487.527535][T24215] check_panic_on_warn+0x89/0xb0 [ 1487.532456][T24215] ? sysfs_remove_file_ns+0x3d/0x70 [ 1487.537635][T24215] end_report+0x78/0x160 [ 1487.541852][T24215] kasan_report+0x129/0x150 [ 1487.546331][T24215] ? sysfs_remove_file_ns+0x3d/0x70 [ 1487.551518][T24215] sysfs_remove_file_ns+0x3d/0x70 [ 1487.556562][T24215] bus_remove_driver+0x198/0x2f0 [ 1487.561484][T24215] comedi_device_detach_locked+0x178/0x750 [ 1487.567284][T24215] comedi_device_attach+0x5d4/0x720 [ 1487.572465][T24215] comedi_unlocked_ioctl+0x5ff/0x1020 [ 1487.577815][T24215] ? kasan_quarantine_put+0xdd/0x220 [ 1487.583090][T24215] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1487.588884][T24215] ? rcu_is_watching+0x15/0xb0 [ 1487.593640][T24215] ? __fget_files+0x2a/0x420 [ 1487.598209][T24215] ? __fget_files+0x3a0/0x420 [ 1487.602864][T24215] ? __fget_files+0x2a/0x420 [ 1487.607428][T24215] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1487.612345][T24215] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1487.618125][T24215] __se_sys_ioctl+0xfc/0x170 [ 1487.622694][T24215] do_syscall_64+0xfa/0xfa0 [ 1487.627174][T24215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.633221][T24215] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1487.639358][T24215] ? clear_bhb_loop+0x60/0xb0 [ 1487.644012][T24215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.649879][T24215] RIP: 0033:0x7f063c78ec29 [ 1487.654270][T24215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1487.673852][T24215] RSP: 002b:00007f063d6d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.682246][T24215] RAX: ffffffffffffffda RBX: 00007f063c9d6090 RCX: 00007f063c78ec29 [ 1487.690192][T24215] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000009 [ 1487.698138][T24215] RBP: 00007f063c811e41 R08: 0000000000000000 R09: 0000000000000000 [ 1487.706088][T24215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1487.714037][T24215] R13: 00007f063c9d6128 R14: 00007f063c9d6090 R15: 00007ffc425d9668 [ 1487.721992][T24215] [ 1487.725241][T24215] Kernel Offset: disabled [ 1487.729542][T24215] Rebooting in 86400 seconds..