last executing test programs: 7m32.035604558s ago: executing program 1 (id=725): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r1, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}, {&(0x7f0000000280)="37c870ef0c000000e20ecb0700c3a84a769112f9b6993b5209357e35105dadaedbf239", 0x23}], 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(0x0, 0x20, &(0x7f00000004c0)="9266b789d2a124c788f903c38e5f6d010600de5d1cb86feb", 0x0, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x3, &(0x7f0000000180)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r3, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/118, 0x20}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 7m31.740226284s ago: executing program 1 (id=727): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f000006e000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0xffb0c000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) 7m29.265246115s ago: executing program 1 (id=740): recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=""/230, 0xe6}, 0x6}], 0x1, 0x10120, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 7m29.066044704s ago: executing program 1 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 7m25.63131629s ago: executing program 1 (id=745): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 7m25.366510106s ago: executing program 1 (id=747): unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000001c}, 0x4000050) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/softlockup_count', 0x189080, 0x130) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x0, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) read$snddsp(r2, &(0x7f0000000180)=""/26, 0x1a) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1, 0x103c, 0xd) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}], 0x20}, 0x122) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x252501, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x3}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x5) 7m10.010393179s ago: executing program 32 (id=747): unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000001c}, 0x4000050) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/softlockup_count', 0x189080, 0x130) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x0, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x10) r2 = syz_open_procfs(0x0, 0x0) read$snddsp(r2, &(0x7f0000000180)=""/26, 0x1a) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1, 0x103c, 0xd) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}], 0x20}, 0x122) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x252501, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x3}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x5) 11.38278548s ago: executing program 2 (id=2333): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0x3}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)=@x86={0x8, 0x9, 0x1, 0x0, 0x1, 0x8, 0x9, 0x5, 0x6, 0x12, 0x81, 0xff, 0x0, 0x10001, 0x3ff, 0xfe, 0x7, 0x0, 0x1c, '\x00', 0x0, 0x7fff}) r3 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000000600)={0x88000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/40, 0x28, &(0x7f0000000500)=""/192, &(0x7f00000005c0)=[r3], 0x1}, 0x58) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0)) ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400280012800b00010062726964676500001800028005002a00000000020000230008000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040844) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.091426225s ago: executing program 2 (id=2348): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f000023e000/0x4000)=nil, 0x4000, 0xa, 0x13, r0, 0x9000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000bc0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) mlockall(0x8) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f0000000780)=[{{&(0x7f0000000480)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)=""/196, 0xc4}], 0x1, &(0x7f0000000740)=""/1, 0x1}, 0x7}], 0x1, 0x8000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000003280)=ANY=[@ANYBLOB="2c00000001010101000000ff7f000000000000010800154000000001080008"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004a80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="bfe4b888f1706d7185e7d10c38d0c329110de018baac69a6f10beae5749e67f0e7657d9a0000", @ANYRES16=r7, @ANYRESDEC=r3], 0x28}, 0x1, 0x0, 0x0, 0x200008c5}, 0x40) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x8e0e, 0x80, 0x9, 0x9, 0x4, 0x8001, 0x1000]}, &(0x7f0000000040)=0x12) write$binfmt_aout(r0, 0x0, 0xffffffdb) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 5.785998714s ago: executing program 2 (id=2350): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6(0x10, 0x2, 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x4010, r3, 0x42799000) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x3a) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r7, 0x0, 0x0, 0x40080) sendmmsg$inet6(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="15", 0x1}], 0x1}}], 0x2, 0x24040040) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r8, 0x5000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) 5.147665061s ago: executing program 4 (id=2353): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x2000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000020080000000180000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000000000000000000000000000000000000009f0ca3d6538689c401179ffa9467c419f60f1c2ca8e4042ae596931c6c32acf5fdc4deffd15e14fb1010c816b1b6d54cc76f8da12ce7c87b962264f1da1d62560231bdf909e2407f25203ceb4ba4c80eafece1dcaa5837e4e189528c24db675e2aa2eb846cd9bb826f461225131e24"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000140)='65', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/loop1\x00', 0x2, 0x0) ioctl(r7, 0x4c01, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl(r8, 0xc138fd01, &(0x7f0000000000)="0400000000000000000000003801") 5.146738637s ago: executing program 3 (id=2354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 5.093250928s ago: executing program 4 (id=2355): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = epoll_create1(0x80000) r4 = eventfd2(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000b80)) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f0000000080)={0x3e8, 0x0, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r8, 0x0, 0x3f, 0x9, &(0x7f0000000180), 0x18) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000180)={0xc0002014}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r10, 0x1a491abc7f6457d5, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c090}, 0x8000) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x43, 0x1}, 0x54) 4.793081975s ago: executing program 2 (id=2357): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x6e0, 0x0, 0xfffffffffffffbff}, {0x31c, 0x0, 0x4000000000000000}, {0x40000090, 0x0, 0xfffffffffffffffc}]}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfff9, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_create1(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write(r5, 0x0, 0x0) 4.790604397s ago: executing program 3 (id=2358): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1d, &(0x7f0000000840)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x842, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000400)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0x4d, &(0x7f0000000100)={&(0x7f00000005c0)={0x88, 0x1403, 0x10, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10144}, 0x20004080) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x3, 0x1, 0x2000, 0x80004, 0xfffffffd, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x20}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB='|'], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x160, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.698722777s ago: executing program 4 (id=2359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000001600)="e433cc715cbfcb33a6ecc990da57c7aae5630252d88b5e329afba13e53387ed524f439847a8388665047d1a205003eb8aea9aace1be240012acb2941c77891d289bc5fc44682745c10788cb6fe9e1def87c74f35334fa9bbd7af7e0ecd1fab76a2a8", &(0x7f0000001700), 0x2, r1}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 4.588104307s ago: executing program 4 (id=2361): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000100)='1', 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) 4.566943725s ago: executing program 5 (id=2362): socket$inet6(0xa, 0x2, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r10, 0xffffffffffffffff, 0x200000000000000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newqdisc={0xd8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa8, 0x2, {{0x3, 0x3, 0x1, 0x10, 0xc, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x1deafe2f}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe70ceb89f67dc13a}, @TCA_NETEM_RATE64={0xc, 0x8, 0xfd01fade64eb51c6}, @TCA_NETEM_RATE64={0xc, 0x8, 0xd2f981005a9e7b11}, @TCA_NETEM_LOSS={0x5c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x8, 0x0, 0xfffffff7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ffffffd, 0x0, 0x3, 0x400, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x400, 0x0, 0x0, 0x97c9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x0, 0x80000000}}]}]}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 4.149341671s ago: executing program 5 (id=2363): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8031, r0, 0xffffd000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f42000/0x4000)=nil) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4442) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b1a65623d7edcefcd2f65bb7b2e69a3f5eeaf055b607bef043f3116b808b2eb616aa8423d6a73a5f6bf032cd33e285f060b6253e21883bb202ddc9fbf4cf8fb8f80f5ae14836c5c9aeec5a0311947e4c39b9daed0", 0xba) socket$kcm(0x2, 0x7, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x403, {{0x2, 0x0, @multicast2}}}, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='xfs\x00', 0x8410, 0x0) 3.842417253s ago: executing program 2 (id=2364): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) mbind(&(0x7f00009b1000/0x3000)=nil, 0x3000, 0x4000, &(0x7f00000002c0)=0x6, 0x4, 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x4, 0x5e, 0x0, 0x5, 0x20000000, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r3, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x100000001, &(0x7f0000006680)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) epoll_wait(r0, &(0x7f0000000240)=[{}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) pselect6(0x40, &(0x7f0000000100)={0x9, 0x8000000000000, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x5, 0xc}, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0xee01) setreuid(0xffffffffffffffff, 0xee01) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='exfat\x00', 0x8080, &(0x7f00000001c0)='discard') fgetxattr(r3, &(0x7f0000000040)=@known='user.incfs.size\x00', 0x0, 0xde) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x400c586e, &(0x7f00000000c0)={0xb, 0x3}) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) 3.662603212s ago: executing program 3 (id=2365): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2.874056061s ago: executing program 4 (id=2367): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000300)={0x6, 0x80000001, 0x10001010, 0xdb1, 0x4, "f21059be8b65aca30f3dbbdf7065bfeea59c28", 0x9, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000240)={0x6, 0x1000, 0x77, 0x80, 0x1a, "49fff6bbdd00"}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001900)={r0, 0x0, 0x9a, 0x0, &(0x7f0000000140)="4c8a96bd0651ea9ac9792b3214b119e1f651b845c42e7ce1983ac5932bcdeca6b56aca9c67c6b3e53f85a5026853c332b41db764b067e69ae58430ed5a4beca7d24426f9da3fced8dd84b65645ff7b9d05c6c4923ec6a779ee478d5ed47f1282f54b67071cb3f2c8957114c640826140e02da49ab11fcf3df67a6481bf66335ab8eb320949efffe597d051debeb29d231a7c7eb5763a8f1ba453", 0x0, 0x5, 0x0, 0xf81, 0x0, &(0x7f0000000900)="621fe5301e679caef8bfc755763f90d107f1092c73829c183b3d6e3db283750b02d50f9b5ac63678f5a14a106f183525b01d9674dbd1ed1a88e182913e0fc5c2170a9ec1619a542b2f76876ce0e4d9e194fe424e059f98c53810370e7578da03aaaec77c8994e518387a13dedfb29f0e34ca371c23daddc18dd2cb35b4ed30d538b27780608a22fdde98cb2b2fb2b1a3a41e65738b5ba8f7ec6c64aeea81c68167e8755a5ebeed2e50ec9a73838655d476bd3601805c7e583f3125b5cea9cc938e38c120ca7309238ed9ca0da3f2825ed828a73c8101f9c1aef4018714d681a73f6cca7f4f1b0fde1389783949d4741532806c7aa1a39f8fe5a61b526e06b7fd3680064c8d0c603f32708a1f2c696205d40c50025b5ae10eadbdbd10a9b315e72c07184056ccbbfd410949610776b91cee5d70aa97a485f4cbcf23826203116b5e54472b8900d1318151ce0fa86053c9607afebceb93d1abbc2b7d7f1358e56f95b5621dd118cd0ab40e6ee6f0c2674c89646744e28ba9ac0039e77bab1738c8c48bdeb21ecb72f2362a5c8c56a46a3e143e03d8de53b7e3981332c17bbe2c42d18ff74dd4b5ddf49c7dbfecc9828a701c0bc40a523b8f7fc0e88ae7fd1a445b266157007aab8f930a59131c0786ef91c10b1a5a5a8f0735f07b8080776e8fea258c0de6c2270461157227b5a4cb3b320f2506b0047f096a29ff314a7d70ce4f54005949ff57f9e58f604420193298f6c4defaf5941a6b34be45f2806a93717eb9c7d4e6736f2022910ffd9d3d4d4ec607fb440ebbbb4e7b637563014c3a7f030cee43087be88344a769f33effe0b987a5ed70ec7eb87fe45e898462e6d3e1b6e946aa1d238742c96a8480f4bea42aed609fe1d6a06d310948234b206a66cd69219900c10b18049e4e4a4a5793e13ce9e65a00ba830ce6fbd4b9bb9a9b1b668148b2006572327ee75a1f8013a6559fc14014defded6d7a1605d38b3464a385351ee3874e9f3853c8f9d4c66a9a9d2978265e7e7ada586c1c65d68ec809385c2743398b7ae47d8ce5cdbba7af32291233088aff98426a1ef1cd7a2111376a4ca21a8480656ff1ae5956c473b5d1d345440c8b02d9a67eb03917b51612cae5c5272f86fec5689e3dfa0d89529573edf24aa6600455e76c31ce1792961174bef58d32d27b932acb9a6204dcaeadd6c04fb2847868e4ab1a7868eac3bc6144b7deef08ac3afef8dff7b154e9a8b0cc48d9b6c23a4905770596ef87279529a8d48c56f478e038a25c6b7212928453972482bcc792439766910dd06e71cdac5aa54c9a3d2d8589bb553d674ca2c864fbefe5c7fb476eebf844de3b12d79f946b8bc43576a332af15bb782f2473ba7cf7ccef0f9a86286ada49e45401e14f7281d266ed0404109c464d4aa347c162e46c7476706647116acd9c6025f9007d226d5f6be3c300d8d44e205fba6f8d66ea93c2da68addf8fd2a0fe716e41e1ab70cf162f6ba6648b7c853611ba922ad11e99b97687324ae058556fd32d758d09c90402d817d6b346c67cecce46413e483addaff005b3398280133335c46236272c1da410a3b3ddc2683ca4ff07c92fe3d594ddaea2cd03a1ce196313b6f7466913433ec6927d9620bd75972728ff85c5d277f69a935139879bf4f1d8cfe87594d08d17278faa0b9abe80e9d5b53961afcc8d132df287ae1904423a399cf0d104ae38dda5cf0da66492733b0e48bf93cc5d38957824d45879d21c46c4c052709324e2c43611a89a483482dee7329e4c38e353bdbb4c4805be94a92c481e5c025cfe00d3f5bf2366ad849d4c83ba44791323770d20abf7a1fdc642c936648efac1cb8d19f7f94c352d2f0bf4c66b42084b450ef98f55ca24df66d4f153779121f2db57f5e1bac0bec4c5d6e154a1e91c3d3cf21636e0a2d64c89319bdd9cc062507fa529510b8a339ef172c18c8c88d5ebf8ff63e91c2eb5b669e6ecdd16bce041adbb5905dd28cbc80a6d565e213f49dcdc0135886df281ec082aa6663fba969739916d84cd65cdcdb1668f54dcab97226a91dcc9ab0713ef45d9f852bf78f6c3f4846b02359ec1ac12e33aec8e859981d1f71193680957abdc970a2a957054bd7431c4eb6d9db4911c2f87b9d652d6c32b496580fea3eb32aec590ae56a46cf892889f58f97ace8f7ae9e69495c0256658ede69af1069251a6c87b879692e30d7faf3c42974f29501381baf85bd74877b8977d29917f749f0778ef48c84c917acc1874e69359dac026b31e959a38f4055f4fcd664702d228926136064da1673faa9b5ef9fae17baa9ba991564d29264de3428092ffea1a063ff0e330ce6d3446bb0f2fcf8f81ba313c9ff8a770418effda6731e1372709241d794184d3af4913e0dfd94d5f21394869f4f8eca87d02d174e882733706e84de1e59c53b613d2c3400fa2807c88c97b2cead8001cee5bcb57d1320ed0394090c576f6f1e3d4efacc50fbea311ff2a142074bf322a1a3527356bcc573da72450850e0756a24ce6a7514370f42b093eaab2989a45e8b7543885a5b592dfa894d2d2b423838466c5d49e3593b5a8976b24c5e1d7c347295e414515286116efc8fc6d5a467a4acb6b6d597dce8ed22cc7a822e65f22e7148474ce8ad4c12f99186e6a52fb3df29d95f20632458c89adaf56c5dfe5f14bc7b58ab7b7bc0af09bde41ed64dff5e448eaf1dbfd3979de3518491134b64f72d7b87a54b49e8499b46120062ef26f3891346956d048eca2f5eccefaffcee26ef0ec8505f716b9f0356ec27a04d294ad0bcd82769e3a8dfe6aa4d9bfa37128dc8cffcbc3a4f8bfae313f326218c8efbdfc300986b0d610369c014afd1cd418302db1ccadfb982b9692eb323ec7dafeecc0b26fb8a3f099bc0b75d6b71462e402396f51392d0c1bfb3ef98483abea5abddf7b48bdf1a8eb30a154a7b60ca1b1091de796cbb0c9fbbfff4247bccf0c6c349be7d3730a0195fecb80e52cf4141ccc218f97b6befecd32bd5e766db295b6c7530c17fd6ee2cd3cfe28925851e791fe1704ede0eccd36921bff561f40667b832fd4343af3fa53591aebf2c3a75c3acd2dbfa3895826cbf953d51fc1017d7f9b03528592c99b32dd737587d325c38ca82c9793b923368fee741e7f2f31061c84d630972164f0109b6be0096b0b5b20bdd458b1c5f6303a771871e4c9a3d3409510d2badaf273884068637bd25bc038314bfb0b70b8920e3840c11ec43ea1a8c87a4092ab8648f74dcfdb552737b4837cef9126583a1628a0a45856bb536818f7d4fcb060dbae89a4c5ba256e5cab064819aad219efff792571311a1dacfd8486f9caada68954dafaea1463bb7c0136876ac31c3e3f613e3d231b06f3344bb668b3c9e1da27b329d77168110e07f87e6e1b8c92bcb300c275d0d0fb477bd46bf7c3eba32374a275cdfe40c437f604ada5e2711a49625511422216594c0921a706389b182058e7f8f7c0fbf7062123649320782010668bcbccf6e2dfdacf62b52a3e1f9dc5feb0c03d9ecbe35e152251e33960e74fdd6ee1ab7aadcd6d4b003f68a8c633aefe6f0f6f8f62821880f245174e8a276f79760c3ca18969a9c4cbf9c965b452dcb9a53404240ebb1e92211098b5004689c140382dbb925559facc618e4a7207c493c81592457e18f92d7b44a5f6a0c054599a5cbbe3f81d3e364c680379233183f0ff361526bc2f37f1c52eb238c577a83eb5ea6ce61d532a967beef739d97cbf2ed91e4ab2f9d21b55184defd804020fe742ae67d0f5ebbcf961b65de9634983659e3164ca788607e92dde89df5ab753ec6f61751045fc93436338498cb5e4244bf853dcc307434d6126eec996d051d71e251ab6563769aa9cd7eab8a037758ef334c7c9f5893a30c16060cd2e2c008a933443dc3cf4eb24c590a681b86e9bdb4930c8fb976c7074ca85cd6d274c508cd5ca696244af238395ff8d4969d41df00bab5480b1285c8f6d51742661f86d76124994a822a43eed24aea5e6c84c21aa7ad1dba40dc5fd60b51a8936e6fb37fef5cd402d042948bbcc6d115577b17ab3c7e1dac51f5fca78ff6f7db3ff8594ea15fe3776d745816ed99a8da9f2ca70fef13603ba483b448ade1af7dd886032b7d6567ac3a208b425836e1022ec8864ddbd71e77422f6634768ffaad008bb7d3882dfc3a295e59533056db3d7538c0041a7c76a4c8a740179957aeba20ca9f32486893576f8c9fb7799178fa29277aa788a48fc8b1e674671a31a45054532f4288eb6a9989af0d1b6042c5724b9d14f742c0802411c012ce129723588f2d2b8fd305a73eb12f0b97a96728c06083f6ca873cec2295e3cb645a7fa93adc18ae5837bd6774b6291022bf1237bb246febe6c26d38633740603530f7692de47b09bfe195b7d5551db324860f58332fc1aaa366e053dd0908641c9ad128460e09f21f42ad41e7c4e89098f44f939e36851614d8f49035c849363138fe93243a93854323e2964be4c9d953f5740a841509025c57febe9bf41ba02e1a1c81307c2acdcbe78192ccb6d3f359a94d00324f33a3e6d38b8f5ea5fc51c87f93420eb9ccb343ff792345069dd9e97f48371247c896822fea4d4e76fcae55090e70667a6948691bb39b0cd810a233fd359782e698eb659c7bf1a741021f8bae3e3b6377e70253ce48e7e128719946f4561bcc23dd6f703f5843736f3563e1aa1853c22d65a178bce8e841861c7e7521d92b233e53718d8b7439f6cd49dc1c48b52f0aadf468951a06aafc3275f2bc9e4b6f74a4de28be52fe15714c2c150fdce2e62aa7e4ca67f00d768827fb40ad7c93a5bee34fd8f2c9f7e55d0a5ab1876e0b81f9adbd6c8749624f22501c38087c234d0fb8fcae2ce041acd718349fd4a5ae0768f3d878e1b93bf19ede88a75ce4eb31d8bb93d60a49f53df4b2a38b83509118402a98724546c702ecc2fe033f52187dd12b60dc92576fa4c7c8bae687db1eb60fa85ae403f79786776f024f068bfa00af3ef0b724302a2aed2c4e4528b3f7e2980eae6c738388b62b059a555fd2897ba09c37fb2cd044eda0887889229ea3004c96b31fb7d8d2afa2f00eecdd8313127ce9a81d3a2d4cb1aa37fa7388b6d6298f765d960a78e61db395da653c5f0e377a97c2fbbb55aa2abcbc45340543c193ee91d05e0bc3fa3cc6a057b3ce66f5a346aeaebf51a4dc301c6bf36f9b1d15ce81d781a810b0217cab861a8d60a995c6b65999a42ee471d57662c051690fd551318ab2bc9fb29816f1f4db6925d3fdd1372a9e7befc20d08fa974295322e0d313fe2ada318a78becf2ed533c7fd2e43f4ed540ad5b49e6fccb35f93f4c2df54ca864a0a3f084fdab9981920edbfbe5a2db08aaa73bf2b6337a931f2059231d2a8cca0ccc9ea5d2f6e1b12fa7fe65c42a21dbb2854fff12e76c275752d4e31488357d4f8bfa95f389e43e6262086ad5c558052d453f92261126afae53f5dbf3898ce6320128fdb84999bada2e60be4e59101861b332867a9d5ec5b556037a9a61af61aa16ba044d8b533e558c386b6f8db7bc01408d54076dac0c04395dd6cac7d0bc50177c3a8d2db628ea7891643848fcd5591f2394fa2849f55", 0x0, 0x2, 0x0, 0x2}, 0x50) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) open$dir(&(0x7f0000000200)='./file0\x00', 0x8400, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/error_log\x00', 0x24903, 0x4) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40850) 2.583559289s ago: executing program 5 (id=2368): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40), 0x2843, 0x0) r0 = mq_open(&(0x7f00000000c0)='*,-[+[H+]\x00\xb1\xb6\xa3\xf2\xb7\x90\x14\xca\xef\x1fkd\xa6\xf72\xcb\xb86\xc6\xaaw\xe7\xfc\xcd\xa2\xad\x00|\x9bW\x7f\xe4\xd5\xd8\xfe\xb9\xecu6P\x04C\a\xf8l\xe5\r\t%\xbc\x1a\x98\x16\x91\vF\xa6#\xdahP\x87b\xb9B\xda\xa7\xfc\xdc\xe2\x85\xc2\xdc\x10\x89{~&v.\xbc:jNx\xaak\x94\x8b\xe5}^\xb2\xfc\x99\x10\xd7*J\xb9\xe1rM\xde\xc1\xab\xa9I\xe2p\xdfHls\xfek\xfcDs\x05\xe4\x19.\xbd\x0f\xb5\xbb\\\xd7\xa6\xed\x86Fl\xdf\xd6\xb8.\xb8(\xc8)3\xad\x80y(\xb3\xe5\xba\xcb\x02\xc3\x8dK\xc2\x9b\x17\\\x04^\xf2*\x92k\xb5\xc4\x8c\xf8G\xf0\x89%\x91\xbf\x1c\t\v\xc3\x0f]\xfb\xea\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\b\x9cX!\x1c4\x83\vF\r\xedht\x14h\xe4\xa1\xd37\xf5\x10\x84t\xc8\x87D\xd7\xe9\xe8', 0x40, 0x0, 0x0) mq_notify(r0, &(0x7f0000000b80)={0x0, 0x2f, 0x0, @thr={0x0, 0x0}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r3, &(0x7f0000001640)="8b", 0x11) 2.506295084s ago: executing program 0 (id=2369): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x6e0, 0x0, 0xfffffffffffffbff}, {0x31c, 0x0, 0x4000000000000000}, {0x40000090, 0x0, 0xfffffffffffffffc}]}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfff9, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_create1(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write(r5, 0x0, 0x0) 2.405441034s ago: executing program 3 (id=2370): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = epoll_create1(0x80000) r4 = eventfd2(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000b80)) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f0000000080)={0x3e8, 0x0, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r8, 0x0, 0x3f, 0x9, &(0x7f0000000180), 0x18) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000180)={0xc0002014}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r10, 0x1a491abc7f6457d5, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c090}, 0x8000) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000580)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x43, 0x1}, 0x54) 2.247630971s ago: executing program 0 (id=2371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000001600)="e433cc715cbfcb33a6ecc990da57c7aae5630252d88b5e329afba13e53387ed524f439847a8388665047d1a205003eb8aea9aace1be240012acb2941c77891d289bc5fc44682745c10788cb6fe9e1def87c74f35334fa9bbd7af7e0ecd1fab76a2a8", &(0x7f0000001700), 0x2, r1}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1.295829904s ago: executing program 5 (id=2372): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x20) 1.10059426s ago: executing program 0 (id=2373): socket$inet6(0xa, 0x2, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r10, 0xffffffffffffffff, 0x200000000000000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newqdisc={0xd8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa8, 0x2, {{0x3, 0x3, 0x1, 0x10, 0xc, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x1deafe2f}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe70ceb89f67dc13a}, @TCA_NETEM_RATE64={0xc, 0x8, 0xfd01fade64eb51c6}, @TCA_NETEM_RATE64={0xc, 0x8, 0xb40e62bb8bcae0b}, @TCA_NETEM_LOSS={0x5c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x8, 0x0, 0xfffffff7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ffffffd, 0x0, 0x3, 0x400, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80, 0x400, 0x0, 0x0, 0x97c9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x2, 0x0, 0x80000000}}]}]}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.097503681s ago: executing program 4 (id=2374): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x6e0, 0x0, 0xfffffffffffffbff}, {0x31c, 0x0, 0x4000000000000000}, {0x40000090, 0x0, 0xfffffffffffffffc}]}) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x3630c1) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xfff9, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) epoll_create1(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write(r5, 0x0, 0x0) 1.095226983s ago: executing program 5 (id=2375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 1.034702394s ago: executing program 3 (id=2376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 815.602706ms ago: executing program 3 (id=2377): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000100)='1', 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) 813.958636ms ago: executing program 5 (id=2378): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000100), 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x40104d01, &(0x7f0000000a00)="000002000000") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000004740)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x2, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, 0x0, 0x0, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008e80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x3, 0x0, 0x4000000000804, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, 0x0, 0x0, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000006780)={0x2020}, 0x2020) mq_open(&(0x7f0000000040)='proc\x00', 0xac9d31767089d386, 0x100, 0x0) 681.799679ms ago: executing program 0 (id=2379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x2000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000020080000000180000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000000000000000000000000000000000000009f0ca3d6538689c401179ffa9467c419f60f1c2ca8e4042ae596931c6c32acf5fdc4deffd15e14fb1010c816b1b6d54cc76f8da12ce7c87b962264f1da1d62560231bdf909e2407f25203ceb4ba4c80eafece1dcaa5837e4e189528c24db675e2aa2eb846cd9bb826f461225131e24"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000140)='65', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/loop1\x00', 0x2, 0x0) ioctl(r7, 0x4c01, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl(r8, 0xc138fd01, &(0x7f0000000000)="040000000000000000000000380100") 234.47927ms ago: executing program 0 (id=2380): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x83) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r3, &(0x7f00000001c0)=""/57, 0x39) getdents64(r3, &(0x7f0000001f80)=""/4096, 0x1000) 228.681147ms ago: executing program 2 (id=2381): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8031, r0, 0xffffd000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f42000/0x4000)=nil) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4442) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b1a65623d7edcefcd2f65bb7b2e69a3f5eeaf055b607bef043f3116b808b2eb616aa8423d6a73a5f6bf032cd33e285f060b6253e21883bb202ddc9fbf4cf8fb8f80f5ae14836c5c9aeec5a0311947e4c39b9daed06a823c", 0xbd) socket$kcm(0x2, 0x7, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x403, {{0x2, 0x0, @multicast2}}}, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='xfs\x00', 0x8410, 0x0) 0s ago: executing program 0 (id=2382): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) kernel console output (not intermixed with test programs): ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa72619ddeb code=0x7ffc0000 [ 176.271711][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 176.417476][ T27] usb 4-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 176.441253][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.441274][ T27] usb 4-1: Product: syz [ 176.441283][ T27] usb 4-1: Manufacturer: syz [ 176.441292][ T27] usb 4-1: SerialNumber: syz [ 176.502471][ T27] usb 4-1: USB2VGA dongle found at address 2 [ 176.515812][ T27] usb 4-1: Allocated 8 output buffers [ 176.857181][ T6753] netlink: 'syz.3.283': attribute type 30 has an invalid length. [ 176.892205][ T5725] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 177.016732][ T6757] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 177.043192][ T5725] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 177.044788][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.044849][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.044888][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.078585][ T5725] usb 3-1: config 0 descriptor?? [ 177.236190][ T27] usb 4-1: Failed to early initialize device [ 177.259193][ T27] usb 4-1: USB disconnect, device number 2 [ 177.485744][ T6760] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.567111][ T5725] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 177.608665][ T5725] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 177.709866][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.720659][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.923476][ T5725] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 178.000140][ T5725] usb 3-1: USB disconnect, device number 2 [ 178.266489][ T6765] fido_id[6765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 178.343512][ T6772] syzkaller0: entered promiscuous mode [ 178.343538][ T6772] syzkaller0: entered allmulticast mode [ 178.346852][ T6772] netlink: 168 bytes leftover after parsing attributes in process `syz.3.296'. [ 180.172955][ T6780] mmap: syz.0.295 (6780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 181.614884][ T6803] kernel read not supported for file /per_cpu/cpu0/trace (pid: 6803 comm: syz.1.302) [ 181.615560][ T32] kauditd_printk_skb: 60 callbacks suppressed [ 181.615576][ T32] audit: type=1800 audit(1791036732.911:108): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.302" name="trace" dev="tracefs" ino=3851 res=0 errno=-22 [ 181.997067][ T6816] syzkaller0: entered promiscuous mode [ 181.997092][ T6816] syzkaller0: entered allmulticast mode [ 182.030352][ T6816] netlink: 168 bytes leftover after parsing attributes in process `syz.3.309'. [ 182.442448][ T6821] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.641951][ T6848] Bluetooth: MGMT ver 1.23 [ 183.803112][ T6850] syzkaller0: entered promiscuous mode [ 183.803138][ T6850] syzkaller0: entered allmulticast mode [ 183.811527][ T6850] netlink: 168 bytes leftover after parsing attributes in process `syz.2.321'. [ 184.034111][ T6859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.437446][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 184.494227][ T32] audit: type=1326 audit(1791036735.791:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.336" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72619e159 code=0x7ffc0000 [ 184.494288][ T32] audit: type=1326 audit(1791036735.791:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.336" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72619e159 code=0x7ffc0000 [ 184.495533][ T32] audit: type=1326 audit(1791036735.791:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.336" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa72619e159 code=0x7ffc0000 [ 184.495585][ T32] audit: type=1326 audit(1791036735.791:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.336" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72619e159 code=0x7ffc0000 [ 184.495641][ T32] audit: type=1326 audit(1791036735.791:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.336" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72619e159 code=0x7ffc0000 [ 184.498002][ T32] audit: type=1326 audit(1791036735.791:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.336" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fa72619e159 code=0x7ffc0000 [ 184.498053][ T32] audit: type=1326 audit(1791036735.791:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.336" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72619e159 code=0x7ffc0000 [ 184.687312][ T5718] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 184.706501][ T32] audit: type=1326 audit(1791036736.001:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.2.337" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 184.708676][ T32] audit: type=1326 audit(1791036736.001:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.2.337" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 184.827368][ T5718] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 184.829598][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.856278][ T5718] usb 2-1: config 0 descriptor?? [ 185.111830][ T5718] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 185.579876][ T5718] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 185.579906][ T5718] [drm] Initialized udl on minor 1 [ 185.670074][ T6913] netlink: 64 bytes leftover after parsing attributes in process `syz.2.341'. [ 186.101024][ T6925] netlink: 384 bytes leftover after parsing attributes in process `syz.2.344'. [ 186.242339][ T6928] syzkaller0: entered promiscuous mode [ 186.242368][ T6928] syzkaller0: entered allmulticast mode [ 186.268516][ T6935] netlink: 168 bytes leftover after parsing attributes in process `syz.3.343'. [ 187.701840][ T5725] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 187.855926][ T5725] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.858305][ T5725] usb 3-1: config 0 has no interfaces? [ 187.858345][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.871343][ T5725] usb 3-1: config 0 descriptor?? [ 188.170288][ T6961] FAULT_INJECTION: forcing a failure. [ 188.170288][ T6961] name failslab, interval 1, probability 0, space 0, times 1 [ 188.170320][ T6961] CPU: 1 UID: 0 PID: 6961 Comm: syz.2.351 Not tainted syzkaller #0 PREEMPT(full) [ 188.170342][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.170358][ T6961] Call Trace: [ 188.170365][ T6961] [ 188.170375][ T6961] dump_stack_lvl+0xe8/0x150 [ 188.170402][ T6961] should_fail_ex+0x3eb/0x540 [ 188.170427][ T6961] should_failslab+0xa8/0x100 [ 188.170448][ T6961] ? __kernfs_new_node+0xe6/0x980 [ 188.170467][ T6961] kmem_cache_alloc_noprof+0x9c/0x600 [ 188.170489][ T6961] ? __pfx_stack_trace_save+0x10/0x10 [ 188.170507][ T6961] ? __kernfs_new_node+0xe6/0x980 [ 188.170563][ T6961] __kernfs_new_node+0xe6/0x980 [ 188.170583][ T6961] ? kasan_save_track+0x4f/0x80 [ 188.170600][ T6961] ? kasan_save_track+0x3e/0x80 [ 188.170616][ T6961] ? kasan_save_free_info+0x40/0x50 [ 188.170635][ T6961] ? kfree+0x1c5/0x650 [ 188.170656][ T6961] ? __pfx___kernfs_new_node+0x10/0x10 [ 188.170674][ T6961] ? lock_acquire+0x115/0x350 [ 188.170693][ T6961] ? kernfs_root+0x1c/0x230 [ 188.170717][ T6961] ? kernfs_root+0x1c/0x230 [ 188.170735][ T6961] ? kernfs_root+0x1c/0x230 [ 188.170750][ T6961] ? kernfs_root+0x1c/0x230 [ 188.170772][ T6961] kernfs_new_node+0xeb/0x140 [ 188.170795][ T6961] __kernfs_create_file+0x4b/0x2e0 [ 188.170817][ T6961] sysfs_add_file_mode_ns+0x237/0x300 [ 188.170846][ T6961] sysfs_create_file_ns+0x12b/0x1b0 [ 188.170868][ T6961] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 188.170885][ T6961] ? module_add_driver+0x31b/0x320 [ 188.170909][ T6961] ? module_add_driver+0x31b/0x320 [ 188.170931][ T6961] bus_add_driver+0x409/0x6e0 [ 188.170960][ T6961] driver_register+0x23a/0x320 [ 188.170983][ T6961] usb_gadget_register_driver_owner+0xf9/0x270 [ 188.171009][ T6961] raw_ioctl+0x1541/0x41c0 [ 188.171034][ T6961] ? tomoyo_path_number_perm+0x219/0x5f0 [ 188.171058][ T6961] ? do_vfs_ioctl+0x116f/0x1530 [ 188.171079][ T6961] ? __pfx_raw_ioctl+0x10/0x10 [ 188.171136][ T6961] ? __fget_files+0x2a/0x420 [ 188.171156][ T6961] ? __fget_files+0x2a/0x420 [ 188.171174][ T6961] ? __fget_files+0x2a/0x420 [ 188.171197][ T6961] ? bpf_lsm_file_ioctl+0x9/0x20 [ 188.171216][ T6961] ? __pfx_raw_ioctl+0x10/0x10 [ 188.171234][ T6961] __se_sys_ioctl+0xfc/0x170 [ 188.171256][ T6961] do_syscall_64+0x166/0x520 [ 188.171273][ T6961] ? trace_irq_disable+0x3b/0x140 [ 188.171290][ T6961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.171310][ T6961] ? clear_bhb_loop+0x70/0xc0 [ 188.171331][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.171352][ T6961] RIP: 0033:0x7fef81d9ddeb [ 188.171372][ T6961] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 188.171389][ T6961] RSP: 002b:00007fef82bdaf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.171413][ T6961] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fef81d9ddeb [ 188.171429][ T6961] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 188.171442][ T6961] RBP: 00007fef82bdbfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 188.171455][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.171468][ T6961] R13: 0000200000000100 R14: 0000000000000005 R15: 0000000000000868 [ 188.171501][ T6961] [ 188.189508][ T6961] bus_add_driver: uevent attr (raw-gadget.2) failed [ 188.189850][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.190339][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.237495][ T5801] usb 3-1: USB disconnect, device number 3 [ 190.316326][ T32] kauditd_printk_skb: 127 callbacks suppressed [ 190.316376][ T32] audit: type=1326 audit(1791036741.611:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.2.360" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fef81d97ed7 code=0x0 [ 190.723422][ T5718] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 190.736850][ T5718] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 190.834837][ T5718] usb 2-1: USB disconnect, device number 2 [ 192.193236][ T7027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.193356][ T7027] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.197802][ T7024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.197827][ T7024] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 192.299564][ T7027] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.382020][ T7027] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.382143][ T7027] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.419746][ T7027] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.534399][ T7027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.534480][ T7027] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.607766][ T7024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.607794][ T7024] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 192.609169][ T7027] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.665269][ T7024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.665295][ T7024] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 192.701441][ T7024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.701480][ T7024] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 192.753311][ T7027] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.766159][ T7027] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.813745][ T7027] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 192.853754][ T7024] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.855773][ T7024] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 193.141487][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 193.501371][ T7068] nvme_fabrics: missing parameter 'transport=%s' [ 193.501393][ T7068] nvme_fabrics: missing parameter 'nqn=%s' [ 193.502088][ T7073] netlink: 64 bytes leftover after parsing attributes in process `syz.0.384'. [ 194.646147][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.646186][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.520234][ T7102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.113637][ T7118] sctp_transport_update_pmtu: 63 callbacks suppressed [ 196.113654][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.113950][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.114192][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.114561][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.122737][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.125716][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.127756][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.129307][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.130711][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 196.134708][ T7118] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 197.496015][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.322963][ T7102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.502022][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 198.696380][ T7102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.719323][ T6053] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discove! [ 198.739530][ T7119] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discove" [ 198.960644][ T7102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.651768][ T44] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.839424][ T9] usb 5-1: device descriptor read/all, error -71 [ 199.861706][ T5710] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 199.912419][ T1162] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.912451][ T1162] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.912471][ T1162] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.021685][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 200.022413][ T5710] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.023624][ T5710] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 200.023656][ T5710] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.023669][ T5710] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.023683][ T5710] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.023696][ T5710] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.023721][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.325457][ T5710] usb 3-1: usb_control_msg returned -32 [ 200.325502][ T5710] usbtmc 3-1:16.0: can't read capabilities [ 200.992339][ T32] audit: type=1326 audit(1791036752.291:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.4.414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 200.993437][ T32] audit: type=1326 audit(1791036752.291:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.4.414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 200.999275][ T32] audit: type=1326 audit(1791036752.291:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.4.414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 200.999332][ T32] audit: type=1326 audit(1791036752.291:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.4.414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 200.999358][ T32] audit: type=1326 audit(1791036752.291:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.4.414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 200.999382][ T32] audit: type=1326 audit(1791036752.291:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.4.414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 201.000975][ T32] audit: type=1326 audit(1791036752.291:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.4.414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 201.062729][ T32] audit: type=1326 audit(1791036752.361:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.4.414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 201.239459][ T32] audit: type=1326 audit(1791036752.531:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.4.414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 201.239523][ T32] audit: type=1326 audit(1791036752.531:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.4.414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 201.739976][ T7160] syzkaller0: entered promiscuous mode [ 201.739993][ T7160] syzkaller0: entered allmulticast mode [ 202.481990][ T5801] usb 3-1: USB disconnect, device number 4 [ 202.829691][ T7177] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 202.830453][ T7177] netlink: 'syz.3.425': attribute type 9 has an invalid length. [ 203.119132][ T7187] X25: received unknown 00 with LCI 000 [ 203.528259][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 204.156024][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807c4af400: rx timeout, send abort [ 204.331601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 204.657343][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807c4af400: abort rx timeout. Force session deactivation [ 204.857722][ T7216] batman_adv: batadv0: Adding interface: syzkaller0 [ 204.857743][ T7216] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.857777][ T7216] batman_adv: batadv0: Interface activated: syzkaller0 [ 205.574797][ T7214] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 205.717387][ T27] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 205.849010][ T7214] batman_adv: batadv0: Removing interface: syzkaller0 [ 206.179707][ T7226] fido_id[7226]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.258596][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 208.869762][ T7279] netlink: 17 bytes leftover after parsing attributes in process `syz.4.461'. [ 208.979963][ T7279] netlink: 17 bytes leftover after parsing attributes in process `syz.4.461'. [ 209.751938][ T7300] netlink: 168 bytes leftover after parsing attributes in process `syz.1.468'. [ 210.146453][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.147169][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.668698][ T7308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.744195][ T7308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.178010][ T6053] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.363510][ T6034] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.364551][ T6034] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.364589][ T6034] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.546084][ T7360] netlink: 168 bytes leftover after parsing attributes in process `syz.2.485'. [ 212.318677][ T7391] netlink: 168 bytes leftover after parsing attributes in process `syz.2.499'. [ 212.331641][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 212.462840][ T9] usb 4-1: device descriptor read/64, error -71 [ 212.701703][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 212.832079][ T9] usb 4-1: device descriptor read/64, error -71 [ 213.109046][ T9] usb usb4-port1: attempt power cycle [ 214.321633][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 214.358439][ T9] usb 4-1: device descriptor read/8, error -71 [ 214.965616][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 215.019563][ T9] usb 4-1: device descriptor read/8, error -71 [ 215.407226][ T9] usb usb4-port1: unable to enumerate USB device [ 217.318307][ T7428] netlink: 168 bytes leftover after parsing attributes in process `syz.0.510'. [ 217.626930][ T7444] X25: received unknown 00 with LCI 000 [ 217.861864][ T5801] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 218.052125][ T5801] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 218.054266][ T191] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 218.149547][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.150655][ T5801] usb 1-1: Product: syz [ 218.150711][ T5801] usb 1-1: Manufacturer: syz [ 218.150727][ T5801] usb 1-1: SerialNumber: syz [ 218.371674][ T191] usb 5-1: Using ep0 maxpacket: 16 [ 218.518361][ T191] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.518423][ T191] usb 5-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 218.598253][ T191] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 218.602410][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.602437][ T191] usb 5-1: Product: syz [ 218.602450][ T191] usb 5-1: Manufacturer: syz [ 218.602464][ T191] usb 5-1: SerialNumber: syz [ 218.827076][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.830892][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.853813][ T7453] bridge_slave_0: left allmulticast mode [ 218.853840][ T7453] bridge_slave_0: left promiscuous mode [ 218.854170][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.908412][ T5718] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.920219][ T7453] bridge_slave_1: left allmulticast mode [ 218.920243][ T7453] bridge_slave_1: left promiscuous mode [ 218.924947][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.000027][ T7453] bond0: (slave bond_slave_0): Releasing backup interface [ 219.023584][ T5801] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 219.101322][ T7453] bond0: (slave bond_slave_1): Releasing backup interface [ 219.172720][ T5801] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.173907][ T5801] usb 2-1: config 0 has no interfaces? [ 219.173944][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.194179][ T7453] team0: Port device team_slave_0 removed [ 219.225078][ T5801] usb 2-1: config 0 descriptor?? [ 219.270504][ T7453] team0: Port device team_slave_1 removed [ 219.276229][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.276251][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.311255][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.311283][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.334422][ T7453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.362668][ T5703] usb 1-1: USB disconnect, device number 3 [ 219.456195][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.457998][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.462399][ T5801] usb 2-1: USB disconnect, device number 3 [ 220.176230][ T191] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 220.196800][ T191] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 220.224965][ T5718] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 220.704263][ T5718] ath9k_htc: Failed to initialize the device [ 220.706290][ T5703] usb 1-1: ath9k_htc: USB layer deinitialized [ 223.404839][ T191] usb 5-1: USB disconnect, device number 4 [ 223.508472][ T7421] udevd[7421]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.557472][ T7488] netlink: 168 bytes leftover after parsing attributes in process `syz.0.526'. [ 228.392626][ T7570] netlink: 168 bytes leftover after parsing attributes in process `syz.2.543'. [ 229.949639][ T7600] capability: warning: `syz.4.552' uses 32-bit capabilities (legacy support in use) [ 230.027891][ T7592] syzkaller0: entered promiscuous mode [ 230.027920][ T7592] syzkaller0: entered allmulticast mode [ 230.031388][ T7602] netlink: 168 bytes leftover after parsing attributes in process `syz.0.549'. [ 230.064707][ T5725] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.227747][ T5725] usb 3-1: New USB device found: idVendor=1241, idProduct=5015, bcdDevice=0.00 [ 230.234182][ T5725] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 142, changing to 11 [ 230.234214][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 230.234247][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.247275][ T5725] usb 3-1: config 0 descriptor?? [ 234.144679][ T7611] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 234.144708][ T7611] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 234.144720][ T7611] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 234.487670][ T7644] netlink: 168 bytes leftover after parsing attributes in process `syz.0.558'. [ 234.524071][ T5725] usbhid 3-1:0.0: can't add hid device: -71 [ 234.524196][ T5725] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 234.547010][ T5725] usb 3-1: USB disconnect, device number 5 [ 235.432800][ T7676] syzkaller0: entered promiscuous mode [ 235.432831][ T7676] syzkaller0: entered allmulticast mode [ 235.440012][ T7677] netlink: 168 bytes leftover after parsing attributes in process `syz.0.568'. [ 240.313690][ T5703] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 240.492768][ T5703] usb 4-1: Using ep0 maxpacket: 16 [ 240.494443][ T5703] usb 4-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 240.496147][ T5703] usb 4-1: config 0 has no interfaces? [ 240.497249][ T5703] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.497274][ T5703] usb 4-1: Manufacturer: syz [ 240.578041][ T7712] input: syz0 as /devices/virtual/input/input9 [ 240.589559][ T5703] usb 4-1: config 0 descriptor?? [ 243.575800][ T7720] netlink: 168 bytes leftover after parsing attributes in process `syz.2.576'. [ 243.597937][ T7727] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 243.597967][ T7727] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 243.597978][ T7727] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 243.745501][ T7741] syzkaller0: entered promiscuous mode [ 243.745526][ T7741] syzkaller0: entered allmulticast mode [ 244.181637][ T5725] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 244.512401][ T5725] usb 1-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.696571][ T5725] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.696623][ T5725] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.696666][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.989611][ T5725] usb 1-1: can't set config #27, error -71 [ 246.993092][ T5725] usb 1-1: USB disconnect, device number 4 [ 247.483077][ T7774] netlink: 168 bytes leftover after parsing attributes in process `syz.4.595'. [ 247.731250][ T5703] usb 4-1: USB disconnect, device number 7 [ 249.566427][ T7782] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 249.566465][ T7782] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 249.566478][ T7782] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 249.751706][ T5703] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 249.837830][ T7793] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 255.700270][ T7832] netlink: 168 bytes leftover after parsing attributes in process `syz.4.606'. [ 256.084016][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.084090][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.984128][ T7871] X25: received unknown 00 with LCI 000 [ 261.223456][ T7913] netlink: 168 bytes leftover after parsing attributes in process `syz.3.628'. [ 263.819295][ T7931] No control pipe specified [ 264.199074][ T7947] netlink: 276 bytes leftover after parsing attributes in process `syz.1.639'. [ 264.199907][ T7947] netlink: 276 bytes leftover after parsing attributes in process `syz.1.639'. [ 264.341759][ T990] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 264.842940][ T990] usb 5-1: Using ep0 maxpacket: 16 [ 264.864671][ T990] usb 5-1: New USB device found: idVendor=046e, idProduct=5577, bcdDevice=0.00 [ 264.957079][ T990] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.957118][ T990] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.957142][ T990] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.957167][ T990] usb 5-1: config 0 interface 0 has no altsetting 0 [ 264.957203][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.509940][ T990] usb 5-1: config 0 descriptor?? [ 265.705911][ T7968] netlink: 168 bytes leftover after parsing attributes in process `syz.1.642'. [ 266.063289][ T7979] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 266.274681][ T990] usbhid 5-1:0.0: can't add hid device: -71 [ 266.274808][ T990] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 266.856113][ T990] usb 5-1: USB disconnect, device number 5 [ 267.239703][ T7982] autofs: Bad value for 'fd' [ 269.074017][ T7991] sg_read: process 346 (syz.1.648) changed security contexts after opening file descriptor, this is not allowed. [ 270.180776][ T8028] netlink: 168 bytes leftover after parsing attributes in process `syz.1.658'. [ 270.679761][ T8032] autofs: Bad value for 'fd' [ 271.986712][ T8066] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 272.134396][ T8070] netlink: 156 bytes leftover after parsing attributes in process `syz.2.671'. [ 272.476035][ T8069] netlink: 168 bytes leftover after parsing attributes in process `syz.3.670'. [ 272.801564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 273.150856][ T8076] autofs: Bad value for 'fd' [ 274.079030][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 274.079789][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 274.480838][ T8098] random: crng reseeded on system resumption [ 275.592537][ T8121] netlink: 168 bytes leftover after parsing attributes in process `syz.4.684'. [ 275.664611][ T8124] autofs: Unknown parameter '0x0000000000000000' [ 276.248371][ T990] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 276.402814][ T8133] netlink: 68 bytes leftover after parsing attributes in process `syz.3.689'. [ 277.460926][ T990] usb 1-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 277.485338][ T990] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 277.485373][ T990] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 277.586604][ T990] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 277.586635][ T990] usb 1-1: Manufacturer: syz [ 277.586650][ T990] usb 1-1: SerialNumber: syz [ 280.092894][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 280.228125][ T990] usb 1-1: can't set config #36, error -71 [ 280.251565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 280.251718][ T990] usb 1-1: USB disconnect, device number 5 [ 280.988362][ T8158] random: crng reseeded on system resumption [ 282.149157][ T8171] autofs: Unknown parameter '0x0000000000000000' [ 282.311599][ T5725] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 282.462758][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 282.463785][ T5725] usb 3-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 282.472695][ T5725] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 282.472732][ T5725] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 282.472770][ T5725] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 282.472795][ T5725] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.472817][ T5725] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 282.472840][ T5725] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 282.472863][ T5725] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 282.472888][ T5725] usb 3-1: config 168 interface 0 has no altsetting 0 [ 282.477740][ T5725] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 282.477778][ T5725] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 282.477817][ T5725] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 282.477845][ T5725] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.477870][ T5725] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 282.477895][ T5725] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 282.477922][ T5725] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 282.477949][ T5725] usb 3-1: config 168 interface 0 has no altsetting 0 [ 282.479911][ T5725] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 282.479946][ T5725] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 282.479984][ T5725] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 282.480039][ T5725] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.480064][ T5725] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 282.480088][ T5725] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 282.480114][ T5725] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 282.480145][ T5725] usb 3-1: config 168 interface 0 has no altsetting 0 [ 282.511082][ T5725] usb 3-1: string descriptor 0 read error: -22 [ 282.511243][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.622866][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 282.643043][ T8178] loop0: detected capacity change from 0 to 32768 [ 282.653328][ T5725] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 282.656334][ T8178] loop1: detected capacity change from 0 to 65536 [ 282.894642][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'. [ 283.054135][ T5725] usb 3-1: USB disconnect, device number 7 [ 284.766741][ T8197] netlink: 68 bytes leftover after parsing attributes in process `syz.0.709'. [ 285.531533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 287.881529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 287.985459][ T8217] ======================================================= [ 287.985459][ T8217] WARNING: The mand mount option has been deprecated and [ 287.985459][ T8217] and is ignored by this kernel. Remove the mand [ 287.985459][ T8217] option from the mount to silence this warning. [ 287.985459][ T8217] ======================================================= [ 287.986532][ T8217] fuse: Bad value for 'fd' [ 288.616966][ T8223] loop0: detected capacity change from 0 to 32768 [ 288.723324][ T8227] loop1: detected capacity change from 0 to 65536 [ 289.393367][ T990] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 289.981392][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 293.000869][ T8288] netlink: 68 bytes leftover after parsing attributes in process `syz.3.728'. [ 293.171553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #286!!! [ 296.312417][ T8323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.743'. [ 300.160428][ T8341] ucma_write: process 422 (syz.3.748) changed security contexts after opening file descriptor, this is not allowed. [ 301.195507][ T8367] netlink: 144 bytes leftover after parsing attributes in process `syz.3.759'. [ 302.229650][ T8373] netlink: 68 bytes leftover after parsing attributes in process `syz.4.761'. [ 302.821572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 304.712878][ T8414] random: crng reseeded on system resumption [ 308.791549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 308.882457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ce!!! [ 309.164377][ T8430] netlink: 68 bytes leftover after parsing attributes in process `syz.0.778'. [ 311.298440][ T8460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.584489][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 314.088768][ T8497] netlink: 68 bytes leftover after parsing attributes in process `syz.4.799'. [ 314.295778][ T8501] random: crng reseeded on system resumption [ 317.530548][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.531199][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.255614][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.260854][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.277215][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.286928][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.289910][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.297866][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 318.535559][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.539928][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.550818][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.571125][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.604189][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.677775][ T32] audit: type=1326 audit(1791036869.971:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 318.677829][ T32] audit: type=1326 audit(1791036869.971:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 318.743418][ T32] audit: type=1326 audit(1791036870.041:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 318.743473][ T32] audit: type=1326 audit(1791036870.041:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 318.743515][ T32] audit: type=1326 audit(1791036870.041:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 318.744028][ T32] audit: type=1326 audit(1791036870.041:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 318.744244][ T32] audit: type=1326 audit(1791036870.041:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 318.744468][ T32] audit: type=1326 audit(1791036870.041:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 318.745364][ T32] audit: type=1326 audit(1791036870.041:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 318.745410][ T32] audit: type=1326 audit(1791036870.041:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef81d9e159 code=0x7ffc0000 [ 319.836457][ T8528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.990013][ T8530] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 320.732101][ T54] Bluetooth: hci5: command tx timeout [ 321.047307][ T8334] Set syz1 is full, maxelem 65536 reached [ 321.472816][ T8561] netlink: 68 bytes leftover after parsing attributes in process `syz.4.819'. [ 321.973170][ T8566] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 322.811968][ T54] Bluetooth: hci5: command tx timeout [ 323.099236][ T8334] syz_tun (unregistering): left allmulticast mode [ 323.969580][ T8580] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 323.969609][ T8580] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 323.969622][ T8580] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 324.399249][ T137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.666703][ T8603] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 324.883054][ T54] Bluetooth: hci5: command tx timeout [ 325.227614][ T137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.671118][ T8617] netlink: 68 bytes leftover after parsing attributes in process `syz.4.833'. [ 325.982887][ T137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.420098][ T137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.527049][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.529291][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.529460][ T8508] bridge_slave_0: entered allmulticast mode [ 326.557851][ T8508] bridge_slave_0: entered promiscuous mode [ 326.600342][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.604429][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.604597][ T8508] bridge_slave_1: entered allmulticast mode [ 326.645394][ T8508] bridge_slave_1: entered promiscuous mode [ 326.954542][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.972700][ T54] Bluetooth: hci5: command tx timeout [ 326.998493][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.163043][ T8508] team0: Port device team_slave_0 added [ 327.185106][ T8508] team0: Port device team_slave_1 added [ 327.531110][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.531138][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.531169][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.598230][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.598291][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.598358][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.919112][ T8640] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 328.439169][ T8508] hsr_slave_0: entered promiscuous mode [ 328.457173][ T8508] hsr_slave_1: entered promiscuous mode [ 328.459597][ T8508] debugfs: 'hsr0' already exists in 'hsr' [ 328.459619][ T8508] Cannot create hsr debugfs directory [ 328.624450][ T137] bridge_slave_1: left allmulticast mode [ 328.624516][ T137] bridge_slave_1: left promiscuous mode [ 328.625472][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.699299][ T137] bridge_slave_0: left allmulticast mode [ 328.699330][ T137] bridge_slave_0: left promiscuous mode [ 328.705475][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.425704][ T8657] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 332.759155][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.797590][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.831369][ T137] bond0 (unregistering): Released all slaves [ 337.662788][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 337.939353][ T8729] random: crng reseeded on system resumption [ 338.895955][ T137] hsr_slave_0: left promiscuous mode [ 338.899859][ T137] hsr_slave_1: left promiscuous mode [ 338.906370][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.907495][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.957203][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.957271][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.120448][ T137] veth1_macvtap: left promiscuous mode [ 339.126215][ T137] veth0_macvtap: left promiscuous mode [ 339.129363][ T137] veth1_vlan: left promiscuous mode [ 339.131074][ T137] veth0_vlan: left promiscuous mode [ 340.037256][ T137] team0 (unregistering): Port device team_slave_1 removed [ 340.070980][ T137] team0 (unregistering): Port device team_slave_0 removed [ 340.401248][ T8733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.842529][ T8733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.287844][ T8733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.631446][ T8733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.760174][ T8508] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 341.760804][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'. [ 341.792714][ T8508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.793958][ T8508] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 341.824757][ T8508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.826175][ T8508] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 341.854128][ T8508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.872361][ T8790] ip6tnl1: entered allmulticast mode [ 341.887794][ T8508] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 341.975108][ T8508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.522436][ T1122] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.855072][ T651] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.981909][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 343.015936][ T1162] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.016882][ T5881] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.211233][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.294614][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.444890][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.444999][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.582574][ T651] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.584509][ T651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.945655][ T8819] syzkaller0: entered promiscuous mode [ 343.945683][ T8819] syzkaller0: entered allmulticast mode [ 343.980355][ T8829] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 344.197111][ T8835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.639465][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.640854][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.648196][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.648330][ T8829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.648667][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.648802][ T8829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.656470][ T8829] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 347.679892][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 351.755207][ T32] kauditd_printk_skb: 1 callbacks suppressed [ 351.755229][ T32] audit: type=1326 audit(1791036903.051:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.4.900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 351.759088][ T32] audit: type=1326 audit(1791036903.051:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.4.900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 351.866256][ T32] audit: type=1326 audit(1791036903.161:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.4.900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 351.870749][ T32] audit: type=1326 audit(1791036903.161:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.4.900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 351.870802][ T32] audit: type=1326 audit(1791036903.161:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.4.900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 351.974452][ T32] audit: type=1326 audit(1791036903.271:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.4.900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 352.181006][ T8903] macvlan2: entered promiscuous mode [ 352.181033][ T8903] gretap0: entered promiscuous mode [ 352.218529][ T8903] gretap0: left promiscuous mode [ 352.467629][ T32] audit: type=1326 audit(1791036903.761:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.4.900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 352.471159][ T32] audit: type=1326 audit(1791036903.761:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.4.900" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490b79e159 code=0x7ffc0000 [ 353.156720][ T8921] loop0: detected capacity change from 0 to 32768 [ 353.193092][ T8921] loop1: detected capacity change from 0 to 65536 [ 353.786235][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.929945][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 354.304468][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 354.751433][ T8954] tipc: Started in network mode [ 354.751919][ T8954] tipc: Node identity , cluster identity 4711 [ 354.751949][ T8954] tipc: Failed to set node id, please configure manually [ 354.751998][ T8954] tipc: Enabling of bearer rejected, failed to enable media [ 355.492133][ T8508] veth0_vlan: entered promiscuous mode [ 355.546560][ T8508] veth1_vlan: entered promiscuous mode [ 355.774869][ T8508] veth0_macvtap: entered promiscuous mode [ 355.802933][ T8508] veth1_macvtap: entered promiscuous mode [ 355.993699][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.044730][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.111678][ T1127] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.111732][ T1127] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.111770][ T1127] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.122956][ T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.735397][ T8975] process 'syz.4.917' launched './file0' with NULL argv: empty string added [ 356.794753][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.794775][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.007248][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.007274][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.072327][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 357.637487][ T8994] netlink: 100 bytes leftover after parsing attributes in process `syz.3.923'. [ 358.208605][ T9002] loop1: detected capacity change from 0 to 65536 [ 360.452014][ T5710] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 360.617628][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 360.640110][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 360.640278][ T5710] usb 3-1: New USB device found: idVendor=0582, idProduct=000c, bcdDevice=0.fe [ 360.661313][ T5710] usb 3-1: config 1 has an invalid descriptor of length 35, skipping remainder of the config [ 360.661601][ T5710] usb 3-1: too many endpoints for config 1 interface 2 altsetting 1: 119, using maximum allowed: 30 [ 360.661701][ T5710] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 360.685265][ T5710] usb 3-1: string descriptor 0 read error: -22 [ 360.685656][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.871856][ T9040] netlink: 168 bytes leftover after parsing attributes in process `syz.0.939'. [ 361.030277][ T5710] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 361.033141][ T5710] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.033857][ T5710] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 361.078234][ T5710] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 361.081276][ T5710] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.082718][ T5710] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 361.205216][ T5710] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 361.215702][ T5710] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.859181][ T5710] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 361.910373][ T5710] usb 3-1: USB disconnect, device number 8 [ 362.371757][ T5710] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 362.523413][ T5710] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 362.528911][ T5710] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.528975][ T5710] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.529048][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.558178][ T5710] usb 3-1: config 0 descriptor?? [ 363.127049][ T9083] syzkaller0: entered promiscuous mode [ 363.127074][ T9083] syzkaller0: entered allmulticast mode [ 363.149296][ T9083] netlink: 168 bytes leftover after parsing attributes in process `syz.4.955'. [ 363.396866][ T5711] usb 3-1: USB disconnect, device number 9 [ 363.579462][ T9092] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 364.321964][ T9110] syzkaller0: entered promiscuous mode [ 364.321989][ T9110] syzkaller0: entered allmulticast mode [ 364.330876][ T9110] netlink: 168 bytes leftover after parsing attributes in process `syz.5.968'. [ 365.232855][ T9135] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 365.420582][ T61] IPVS: starting estimator thread 0... [ 365.501722][ T9143] IPVS: using max 23 ests per chain, 55200 per kthread [ 365.961216][ T9159] netlink: 168 bytes leftover after parsing attributes in process `syz.0.983'. [ 368.602223][ T9173] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 370.412759][ T5725] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 370.430756][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.992'. [ 370.463794][ T9189] bond1: Removing last ns target with arp_interval on [ 370.509091][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.992'. [ 370.571559][ T5725] usb 3-1: Using ep0 maxpacket: 16 [ 370.572399][ T5725] usb 3-1: New USB device found: idVendor=28bd, idProduct=0071, bcdDevice=0.00 [ 370.573632][ T5725] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.573655][ T5725] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.573673][ T5725] usb 3-1: config 0 has no interface number 0 [ 370.573712][ T5725] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.573754][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.656497][ T5725] usb 3-1: config 0 descriptor?? [ 370.669052][ T5725] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 371.053571][ T9207] netlink: 1 bytes leftover after parsing attributes in process `syz.3.995'. [ 371.777511][ T9224] netlink: 168 bytes leftover after parsing attributes in process `syz.0.998'. [ 372.356340][ T9233] netlink: 39 bytes leftover after parsing attributes in process `syz.4.997'. [ 372.361007][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 374.019991][ T990] usb 3-1: USB disconnect, device number 10 [ 374.500942][ T9266] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1006'. [ 376.316617][ T9288] syzkaller0: entered promiscuous mode [ 376.316642][ T9288] syzkaller0: entered allmulticast mode [ 376.383477][ T9288] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1011'. [ 376.665228][ T9305] syzkaller0: entered promiscuous mode [ 376.665252][ T9305] syzkaller0: entered allmulticast mode [ 376.865307][ T9311] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1020'. [ 378.988476][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.996901][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.821077][ T9342] input: syz0 as /devices/virtual/input/input10 [ 381.635360][ T9363] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1035'.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          [ 598.506019][T11670] CIFS: Attempting to mount //127.0.0.1/share [ 598.514537][T11670] CIFS: VFS: Error connecting to socket. Aborting operation. [ 598.514664][T11670] CIFS: VFS: cifs_mount failed w/return code = -111 [ 608.196001][T11738] autofs: Unknown parameter '00000000000000000000' [ 616.360204][T11804] tipc: Enabling of bearer rejected, failed to enable media [ 617.399724][T11821] CIFS: Attempting to mount //127.0.0.1/share [ 617.912388][T10534] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 618.062552][T10534] usb 5-1: Using ep0 maxpacket: 8 [ 618.067724][T10534] usb 5-1: unable to get BOS descriptor or descriptor too short [ 618.067778][T10534] usb 5-1: New USB device found: idVendor=0582, idProduct=000c, bcdDevice=0.fe [ 618.069669][T10534] usb 5-1: config 1 has an invalid descriptor of length 35, skipping remainder of the config [ 618.069745][T10534] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 119, using maximum allowed: 30 [ 618.069782][T10534] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 618.082416][T10534] usb 5-1: string descriptor 0 read error: -22 [ 618.082550][T10534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.157581][T11821] CIFS: VFS: cifs_mount failed w/return code = -112 [ 618.373046][T10534] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 618.375305][T10534] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 619.322765][T10534] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 619.341950][T10534] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 619.352319][T10534] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 619.352893][T10534] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 619.381726][T10534] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 619.383312][T10534] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 619.908968][T10534] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 619.921789][T10534] usb 5-1: USB disconnect, device number 13 [ 625.615051][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.628092][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.257342][T11862] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 628.677463][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'. [ 629.591967][T10534] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 629.743197][T10534] usb 5-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 629.746248][T10534] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.746303][T10534] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 629.746327][T10534] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 629.746366][T10534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.032416][T11888] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 630.830785][T10534] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 630.830856][T10534] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 630.830871][T10534] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 630.923745][T10534] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 630.944084][T10534] usb 5-1: USB disconnect, device number 14 [ 635.706905][T11936] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 635.973652][T10534] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 636.123921][T10534] usb 5-1: New USB device found: idVendor=174c, idProduct=55aa, bcdDevice=1.00 [ 636.127891][T10534] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.127943][T10534] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 636.127970][T10534] usb 5-1: config 1 interface 0 has no altsetting 0 [ 636.179260][T10534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.179303][T10534] usb 5-1: Product: syz [ 636.179318][T10534] usb 5-1: Manufacturer: syz [ 636.179333][T10534] usb 5-1: SerialNumber: syz [ 636.224019][T10534] usb-storage 5-1:1.0: USB Mass Storage device detected [ 636.278755][T10534] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 638.843445][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'.  639.316599 5703 53" 5-1:  $)3#/..%#4, $%6)#% .5-"%2 15  639.42022111974  : 44%-04).' 4/ -/5.4 //127.0.0.1/3(!2%  640.13236811974  : : 22/2 #/..%#4).' 4/ 3/#+%4. "/24).' /0%2!4)/..  640.13253111974  : : #)&3-/5.4 &!),%$ 7/2%452. #/$% = -4 [ 642.869211][T11989] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 646.441233][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1891'. [ 649.833223][T10535] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 650.327181][T10535] usb 5-1: unable to get BOS descriptor or descriptor too short [ 650.327236][T10535] usb 5-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 650.352064][T10535] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.352091][T10535] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 650.352135][T10535] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.394877][T10535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 650.394906][T10535] usb 5-1: Product: syz [ 650.394921][T10535] usb 5-1: Manufacturer: syz [ 650.447612][T10535] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -22 [ 650.896111][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.909495][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.504205][T12043] overlayfs: failed to resolve './file1': -2 [ 651.999984][ T5703] usb 5-1: USB disconnect, device number 16 [ 652.290754][T12057] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 652.763912][T12065] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1910'. [ 652.872344][T12071] netlink: 'syz.0.1911': attribute type 4 has an invalid length. [ 653.076313][T12067] netlink: 'syz.0.1911': attribute type 4 has an invalid length. [ 653.110106][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1914'. [ 654.168626][T12085] overlayfs: failed to resolve './file1': -2 [ 655.440214][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1925'. [ 656.062115][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 657.362067][T12127] syzkaller0: entered promiscuous mode [ 657.362092][T12127] syzkaller0: entered allmulticast mode [ 660.473076][T12142] overlayfs: failed to resolve './file0': -2 [ 662.976876][T12154] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 663.097582][T12155] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 663.906497][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 665.772914][T12194] fuse: Unknown parameter '0x0000000000000004' [ 669.444325][T12203] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 669.677742][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 671.117496][T12238] fuse: Unknown parameter '0x0000000000000004' [ 672.055009][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'. [ 673.387829][T12272] loop1: detected capacity change from 0 to 65536 [ 673.545968][T12276] fuse: Unknown parameter '0xffffffffffffffff' [ 674.139061][T12280] syzkaller0: entered promiscuous mode [ 674.139171][T12280] syzkaller0: entered allmulticast mode [ 675.775390][T12308] overlayfs: failed to resolve './file0': -2 [ 676.379610][T12321] fuse: Unknown parameter '00000000000000000000' [ 680.143289][T12334] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 681.279528][T12355] overlayfs: failed to resolve './file1': -2 [ 681.488557][T12364] fuse: Unknown parameter '00000000000000000000' [ 682.391711][ T5703] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 682.541991][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 682.548538][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short [ 682.548704][ T5703] usb 5-1: New USB device found: idVendor=0582, idProduct=000c, bcdDevice=0.fe [ 682.588448][ T5703] usb 5-1: config 1 has an invalid descriptor of length 35, skipping remainder of the config [ 682.588711][ T5703] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 119, using maximum allowed: 30 [ 682.588816][ T5703] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 682.653270][ T5703] usb 5-1: string descriptor 0 read error: -22 [ 682.653435][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.887137][ T5703] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 682.899855][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 682.900407][ T5703] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 682.943049][ T5703] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 682.944736][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 682.945266][ T5703] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 682.996260][ T5703] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 682.997146][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 683.006874][T12401] overlayfs: failed to resolve './file1': -2 [ 683.238748][ T5703] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 683.264736][ T5703] usb 5-1: USB disconnect, device number 17 [ 683.544742][T12409] fuse: Unknown parameter '00000000000000000000' [ 683.700469][T12416] syzkaller0: entered promiscuous mode [ 683.700495][T12416] syzkaller0: entered allmulticast mode [ 684.187749][T12430] overlayfs: failed to resolve './file1': -2 [ 685.036249][T12445] loop1: detected capacity change from 0 to 65536 [ 685.129861][T12449] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 686.175979][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.176056][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.959392][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2052'. [ 689.482418][T12518] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 691.195474][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 693.567166][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2080'. [ 694.843867][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 695.953701][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 698.508728][T12741] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 699.168029][T12767] loop1: detected capacity change from 0 to 65536 [ 699.704378][T12771] syzkaller0: entered promiscuous mode [ 699.704405][T12771] syzkaller0: entered allmulticast mode [ 701.267073][T12789] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 704.504352][T12853] loop1: detected capacity change from 0 to 65536 [ 704.614798][T12858] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 704.774521][T12861] syzkaller0: entered promiscuous mode [ 704.774546][T12861] syzkaller0: entered allmulticast mode [ 707.211467][T12894] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 707.481728][T12907] overlayfs: missing 'lowerdir' [ 707.861566][T10527] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 707.925076][T12922] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 708.016016][T10527] usb 5-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 708.019109][T10527] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 708.019144][T10527] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 708.027853][T10527] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 708.027879][T10527] usb 5-1: Manufacturer: syz [ 708.027894][T10527] usb 5-1: SerialNumber: syz [ 708.182499][T12933] overlayfs: missing 'lowerdir' [ 708.263578][T10527] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 708.274942][T10527] usb 5-1: USB disconnect, device number 18 [ 710.128261][T12954] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 710.437966][T12962] overlayfs: missing 'lowerdir' [ 710.804981][T12975] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 710.922843][T12979] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 710.972156][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 711.101652][T10522] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 711.252377][T10522] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 711.253258][T10522] usb 5-1: config 0 has no interfaces? [ 711.253296][T10522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.256375][T10522] usb 5-1: config 0 descriptor?? [ 711.498330][T12995] overlayfs: missing 'lowerdir' [ 711.536310][T12999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.556879][T12999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.609732][T10533] usb 5-1: USB disconnect, device number 19 [ 712.220630][T13023] loop1: detected capacity change from 0 to 65536 [ 712.232602][T13023] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2037591854.115.0), cmd(1) [ 713.814838][T13053] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 714.961437][T10527] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 715.122562][T10527] usb 5-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 715.124809][T10527] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 715.124840][T10527] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 715.128140][T10527] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 715.128168][T10527] usb 5-1: Manufacturer: syz [ 715.128183][T10527] usb 5-1: SerialNumber: syz [ 715.357587][T13073] fuse: root generation should be zero [ 715.411800][T10527] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 715.415980][T10527] usb 5-1: USB disconnect, device number 20 [ 715.596307][T13080] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2247'. [ 715.688088][T13084] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2248'. [ 717.267851][T13095] overlayfs: missing 'workdir' [ 718.377476][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2249'. [ 721.547708][T13155] overlayfs: missing 'workdir' [ 722.720272][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2273'. [ 723.328893][T13187] loop1: detected capacity change from 0 to 65536 [ 724.084781][T13201] overlayfs: missing 'workdir' [ 725.425884][T13204] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 725.791426][T10522] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 725.953541][T10522] usb 5-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 725.957828][T10522] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 725.957865][T10522] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 725.995978][T10522] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 725.996009][T10522] usb 5-1: Manufacturer: syz [ 725.996025][T10522] usb 5-1: SerialNumber: syz [ 726.244407][T10522] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 726.256223][T10522] usb 5-1: USB disconnect, device number 21 [ 726.651689][T13236] overlayfs: missing 'lowerdir' [ 726.782198][T13242] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 727.016716][T13249] random: crng reseeded on system resumption [ 728.577522][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2304'. [ 729.788664][T13273] overlayfs: missing 'lowerdir' [ 730.043731][T13279] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 730.210012][T13281] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 730.790728][T13302] overlayfs: missing 'lowerdir' [ 730.921426][ T5703] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 731.074206][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 731.085988][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short [ 731.086051][ T5703] usb 5-1: New USB device found: idVendor=0582, idProduct=000c, bcdDevice=0.fe [ 731.106084][ T5703] usb 5-1: config 1 has an invalid descriptor of length 35, skipping remainder of the config [ 731.106212][ T5703] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 119, using maximum allowed: 30 [ 731.106257][ T5703] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 731.154219][ T5703] usb 5-1: string descriptor 0 read error: -22 [ 731.154379][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.186505][T13308] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 731.430213][ T5703] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 731.431075][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 731.432136][ T5703] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 731.479760][ T5703] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 731.484056][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 731.490617][ T5703] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 731.506745][ T5703] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 731.508132][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 731.690287][T13316] random: crng reseeded on system resumption [ 731.987050][ T5703] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 732.007697][ T5703] usb 5-1: USB disconnect, device number 22 [ 733.965809][T13335] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 733.965846][T13335] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 734.014780][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2333'. [ 734.275838][ T5703] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 734.478676][ T5703] usb 5-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 734.511825][ T5703] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 734.511884][ T5703] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 734.570360][ T5703] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 734.570542][ T5703] usb 5-1: Manufacturer: syz [ 734.570663][ T5703] usb 5-1: SerialNumber: syz [ 736.340221][ T5703] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 736.365752][ T5703] usb 5-1: USB disconnect, device number 23 [ 736.781025][T13360] random: crng reseeded on system resumption [ 738.403353][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 739.458938][T13411] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2354'. [ 739.787921][T13423] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 739.787983][T13423] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 742.022833][T13453] random: crng reseeded on system resumption [ 743.232748][T13469] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 743.232784][T13469] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 743.354956][T13471] syzkaller0: entered promiscuous mode [ 743.354983][T13471] syzkaller0: entered allmulticast mode [ 743.357706][T13471] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2375'. [ 744.041878][T13486] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 744.445200][T13492] [ 744.447814][T13492] ====================================================== [ 744.455539][T13492] WARNING: possible circular locking dependency detected [ 744.463274][T13492] syzkaller #0 Tainted: G L [ 744.469925][T13492] ------------------------------------------------------ [ 744.477684][T13492] syz.2.2381/13492 is trying to acquire lock: [ 744.484366][T13492] ffff88806851ac60 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 744.495127][T13492] [ 744.495127][T13492] but task is already holding lock: [ 744.503210][T13492] ffff88807f2a3960 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 744.513704][T13492] [ 744.513704][T13492] which lock already depends on the new lock. [ 744.513704][T13492] [ 744.525130][T13492] [ 744.525130][T13492] the existing dependency chain (in reverse order) is: [ 744.535031][T13492] [ 744.535031][T13492] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 744.544446][T13492] down_read+0x45/0x320 [ 744.549658][T13492] lookup_slow+0x46/0x80 [ 744.554886][T13492] ovl_lookup_single+0x323/0xe90 [ 744.560932][T13492] ovl_lookup_layer+0x377/0x440 [ 744.566826][T13492] ovl_lookup+0x5e5/0x1c80 [ 744.572242][T13492] __lookup_slow+0x1fb/0x2f0 [ 744.577863][T13492] lookup_slow+0x59/0x80 [ 744.583085][T13492] path_lookupat+0x3f5/0x8c0 [ 744.588698][T13492] filename_lookup+0x265/0x5d0 [ 744.594494][T13492] filename_linkat+0x119/0x5e0 [ 744.600303][T13492] __se_sys_linkat+0x60/0x2d0 [ 744.606003][T13492] do_syscall_64+0x166/0x520 [ 744.611620][T13492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.618692][T13492] [ 744.618692][T13492] -> #0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 744.627310][T13492] __lock_acquire+0x164c/0x2de0 [ 744.633256][T13492] lock_acquire+0x115/0x350 [ 744.638763][T13492] __d_alloc_parallel+0xc32/0x1700 [ 744.644943][T13492] __lookup_slow+0x82/0x2f0 [ 744.650451][T13492] lookup_slow+0x59/0x80 [ 744.655766][T13492] link_path_walk+0xd22/0x1910 [ 744.661604][T13492] path_openat+0x1c4/0x1da0 [ 744.667141][T13492] do_file_open+0x23e/0x4a0 [ 744.672647][T13492] do_sys_openat2+0x115/0x200 [ 744.678351][T13492] __x64_sys_openat+0x138/0x170 [ 744.684240][T13492] do_syscall_64+0x166/0x520 [ 744.689842][T13492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.696879][T13492] [ 744.696879][T13492] other info that might help us debug this: [ 744.696879][T13492] [ 744.708113][T13492] Possible unsafe locking scenario: [ 744.708113][T13492] [ 744.716290][T13492] CPU0 CPU1 [ 744.722243][T13492] ---- ---- [ 744.728146][T13492] rlock(&type->i_mutex_dir_key#5); [ 744.733961][T13492] lock(DCACHE_PAR_LOOKUP); [ 744.741789][T13492] lock(&type->i_mutex_dir_key#5); [ 744.750383][T13492] lock(DCACHE_PAR_LOOKUP); [ 744.755432][T13492] [ 744.755432][T13492] *** DEADLOCK *** [ 744.755432][T13492] [ 744.764426][T13492] locks held by syz.2.2381/13492: 1, last CPU#1: [ 744.771404][T13492] #0: ffff88807f2a3960 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 744.782353][T13492] [ 744.782353][T13492] stack backtrace: [ 744.788821][T13492] CPU: 1 UID: 0 PID: 13492 Comm: syz.2.2381 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.800928][T13492] Tainted: [L]=SOFTLOCKUP [ 744.805668][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 744.816714][T13492] Call Trace: [ 744.820318][T13492] [ 744.823541][T13492] dump_stack_lvl+0xe8/0x150 [ 744.828625][T13492] print_circular_bug+0x2e2/0x300 [ 744.834146][T13492] check_noncircular+0x12f/0x150 [ 744.839564][T13492] __lock_acquire+0x164c/0x2de0 [ 744.844888][T13492] ? rcu_is_watching+0x16/0xb0 [ 744.850128][T13492] lock_acquire+0x115/0x350 [ 744.855081][T13492] ? __d_alloc_parallel+0x39e/0x1700 [ 744.860890][T13492] ? __d_alloc_parallel+0x39e/0x1700 [ 744.866693][T13492] ? __d_alloc_parallel+0x39e/0x1700 [ 744.872494][T13492] __d_alloc_parallel+0xc32/0x1700 [ 744.878098][T13492] ? __d_alloc_parallel+0x39e/0x1700 [ 744.883905][T13492] ? __d_alloc_parallel+0x39e/0x1700 [ 744.889704][T13492] ? __pfx___d_alloc_parallel+0x10/0x10 [ 744.895800][T13492] ? lock_acquire+0x115/0x350 [ 744.900950][T13492] __lookup_slow+0x82/0x2f0 [ 744.905890][T13492] lookup_slow+0x59/0x80 [ 744.910545][T13492] link_path_walk+0xd22/0x1910 [ 744.915771][T13492] path_openat+0x1c4/0x1da0 [ 744.920727][T13492] do_file_open+0x23e/0x4a0 [ 744.925662][T13492] ? __pfx_do_file_open+0x10/0x10 [ 744.931173][T13492] ? _raw_spin_unlock+0x28/0x50 [ 744.936489][T13492] ? alloc_fd+0x6af/0x760 [ 744.941244][T13492] do_sys_openat2+0x115/0x200 [ 744.946404][T13492] ? __pfx_do_sys_openat2+0x10/0x10 [ 744.952109][T13492] ? do_user_addr_fault+0xd1e/0x1480 [ 744.957960][T13492] ? __sanitizer_cov_trace_pc+0x8/0x80 [ 744.963958][T13492] ? do_user_addr_fault+0xd3f/0x1480 [ 744.969755][T13492] __x64_sys_openat+0x138/0x170 [ 744.975095][T13492] do_syscall_64+0x166/0x520 [ 744.980129][T13492] ? trace_irq_disable+0x3b/0x140 [ 744.985635][T13492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.992295][T13492] ? clear_bhb_loop+0x70/0xc0 [ 744.997431][T13492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.003923][T13492] RIP: 0033:0x7fef81d5e98e [ 745.008785][T13492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.030333][T13492] RSP: 002b:00007fef82bdcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 745.039583][T13492] RAX: ffffffffffffffda RBX: 00007fef82bdd6c0 RCX: 00007fef81d5e98e [ 745.048349][T13492] RDX: 000000000004a102 RSI: 00007fef82bdcc00 RDI: ffffffffffffff9c [ 745.057125][T13492] RBP: 00007fef82bdcc00 R08: 0000000000000000 R09: 0000000000000000 [ 745.065896][T13492] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 745.074670][T13492] R13: 00007fef82026038 R14: 00007fef82025fa0 R15: 00007ffcdca3d4c8 [ 745.083434][T13492] [ 747.602330][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.602380][ T1315] ieee802154 phy1 wpan1: encryption failed: -22