last executing test programs: 8.524653207s ago: executing program 2 (id=14): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1e3040, 0x0) r3 = open$dir(&(0x7f0000000340)='./file0\x00', 0x129a40, 0x8a) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x25) getrusage(0xffffffffffffffff, &(0x7f0000000500)) syz_emit_ethernet(0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045f8005e00000000002f907800000000000000002480655800000000004e9ed18dc41114000000100008000100000086dd080088be00000000100000000100000000000000080022eb050000002000000e02000000000000000000000008"], 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004804) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000000c0)=0x319, 0x4) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000001) r9 = dup3(r7, r8, 0x80000) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r1, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d400000026000b00fdffffff0300000007000000c000e98008007b00ac1414bb0800a40047504c001000288008003300", @ANYRES32=r2, @ANYBLOB="040014809a00400036e2e4a92fb703c02a2148adf8fa5ac154abc6970d5cd0298d62feaef63f7032f47678f6881af720ddbe59bc710878e77ed9935e20f0fd0a08b5bb68ad08712d313ff143eb207f1686cba1a9fdce72c63b05adc60a2e81d763a5be554b7ad4e50f4783da9034c36f6fbc57585231f537c6368d246e4f909d1ce949e184315e850971b99268f097bb5488d453de7400000000000000000000139aba51844805813c8651c308654f64a230"], 0xd4}, 0x1, 0x0, 0x0, 0x48014}, 0x8000) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x80000000) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\xab\xec\x0eb', &(0x7f00000005c0)='\x00\xf4\xe1y\xe0\x05\x17\x06>$\xd1\xaa\x00\xaa\xbb7\x8es\xe6\f\xefJ\xc9\xd5\xda[\xaeC>\xdew9\x87u.\xd8\x96\x93\xc7\xca\xbfv\x94\x8b\xaa\x84\xb9w`\x88\xff\xe2\xbdK\xb6\xf3W\"7\xac\x8c\xe33\xa2B\xfd\xa5\xae8\xf7\xdb\xf5\xe2E\x10\b\x02\x00@\xdd\xee\x8a\xd7%)\x05\x1aM\v\x1e\x84\x83\t\x13 \x8c\x06\xf5S\x8d\xf9J[m\x17-\xa7\xeaM\x8fl\xe3?\xfe\xe2ju\xb1r\xadF\xad\xf9\xb5\xc2N\xe7VW\x9e\f\x8e\x1e\xc5\xf3$\x81\x1a\xaf6\xcbOSa\xc7\xe7,\x01\x18:\xf0I\xd7\xac\x8e\xd6\x8d\x16\xed\xd6\x8e\xd4\xf8\xe1\xea\x02y\x7f\x1c\x98mF\xd6:\x8bg', 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000002c0)="28d3") 7.022753473s ago: executing program 0 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES8=0x0, @ANYBLOB="a9f093596380853195a412be774a77b34bb629d784ad42ef67b8b3a9b83c6c43b6d61a2933e6405d9ab3deabc181b6962adb92f0a555ded20cec81307261462ba4cec71e040294edc9faf1db7d61e50988e5ee4b111e6edd8988610726a8253ba1fc55f244637fab5cedbac830cdcc5bc9df0023efd4aa62eefb0f0fba38b42500a45da8aa0b99cca3a2118cacb1c4332db1a1dc2864c51476ea8547f6bae2ad2ef5fe0a58b928f5aa0f61af33ff7925300d689c14963dfd4acf72a5d3c2d1cf5dafa57f292881fd9ba7f497e63f21cbb7b0b773", @ANYRES32, @ANYBLOB], 0x50) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) syz_open_pts(r2, 0x8182) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) lseek(0xffffffffffffffff, 0x249f0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) 6.430347443s ago: executing program 2 (id=20): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0x7, &(0x7f0000000100)=""/229) syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2) syz_usb_connect(0x6, 0x371, &(0x7f0000000a40)=ANY=[@ANYBLOB="f7851842b6a27fc49ec0f34d100b055965ceaad0395f99d0b6c172d6c98b61c66d3539ffd290c64155cce9d86391cc0c0243986636400e917b5aca410eace2c4c45c941dca7584be1cda77ba68a405253b56ad0a844170c8e8dbb7ace02354ebc3176553cbd6e9ab673dc69f6f24a77a5b447497a4d183005f155c69cdc2965bf6c21d5c84532e41fc48d509d6c78afc28f98506b13f3aceab085bf4484008154f0ad7b5"], 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000002c0)=0xb, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x4}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x1fc}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) write$tcp_congestion(r5, &(0x7f0000000280)='illinois\x00', 0x9) syz_io_uring_setup(0xefe, &(0x7f0000000400)={0x0, 0x5961, 0x20, 0x2, 0x20000ea}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000004800)={0x2020}, 0x2020) readv(r9, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/14, 0xe}], 0x1) 5.472469526s ago: executing program 2 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES8=0x0, @ANYBLOB="a9f093596380853195a412be774a77b34bb629d784ad42ef67b8b3a9b83c6c43b6d61a2933e6405d9ab3deabc181b6962adb92f0a555ded20cec81307261462ba4cec71e040294edc9faf1db7d61e50988e5ee4b111e6edd8988610726a8253ba1fc55f244637fab5cedbac830cdcc5bc9df0023efd4aa62eefb0f0fba38b42500a45da8aa0b99cca3a2118cacb1c4332db1a1dc2864c51476ea8547f6bae2ad2ef5fe0a58b928f5aa0f61af33ff7925300d689c14963dfd4acf72a5d3c2d1cf5dafa57f292881fd9ba7f497e63f21cbb7b0b773", @ANYRES32, @ANYBLOB], 0x50) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x80000000}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"}) syz_open_pts(r2, 0x8182) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) lseek(0xffffffffffffffff, 0x249f0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) 4.455464329s ago: executing program 0 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0x8}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xb, 0x0, 0x3, 0x6, 0x7f, 0x6}, {0x0, 0x0, 0x38, 0xef, 0x84, 0xf, 0x92, 0x54, 0x0, 0x5, 0x4, 0x7, 0x3a}], 0xffffffff}) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x810) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4c054) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000300)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x5db, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x41}}}, 0x0) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f00000000c0)={0x1, 0x1, 0x6f, &(0x7f0000000040)=""/111}) r7 = syz_open_procfs(0x0, 0x0) fchdir(r7) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x800000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r8, 0x0, 0x0) creat(0x0, 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r9, &(0x7f0000001980)=[{&(0x7f0000000040)=""/15, 0x20000}, {0x0, 0x32}], 0x1000000000000100) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0a00000004000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000fd00"/22], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.504557693s ago: executing program 1 (id=27): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz1\x00', {0x2, 0x909, 0x85a8, 0x9}, 0x11, [0x31b, 0x2, 0x6, 0x5, 0x6, 0x9d, 0x5, 0x100, 0x7fff, 0x7, 0xc, 0xe4c5, 0x3, 0x8, 0x0, 0x8, 0x8, 0x7, 0x1, 0x300000, 0x3ff, 0x5c3a, 0x3, 0x3, 0x3, 0x2a7d, 0x68300000, 0x7, 0x6, 0x9, 0x7, 0x9, 0x4, 0x0, 0xffff, 0x7, 0x0, 0x0, 0x9, 0xffffffff, 0x3, 0x1, 0x9, 0x2, 0xc3, 0x3ff, 0x6, 0x7ff, 0x7f, 0x1, 0xfc, 0x6, 0x0, 0x9, 0x8001, 0xffff, 0x8000, 0x101, 0x4, 0xfffffe00, 0x9, 0x2, 0x6, 0x3f], [0xc12, 0x50d, 0x6, 0xb09, 0x3, 0x3, 0x5, 0x3, 0x9, 0x200, 0xa0, 0x1, 0x5, 0x3, 0x9156, 0xad, 0x2d53ba06, 0x1, 0xffffe6f3, 0x0, 0x8, 0xff, 0x7, 0x6, 0x2, 0x7, 0x7, 0x3411, 0x8001, 0xf5e, 0x4998, 0x3, 0x40000000, 0xff, 0x8, 0x3, 0x7ff, 0x100, 0x8001, 0x9, 0xfffffffa, 0x3, 0x7, 0x6, 0x9, 0xfff, 0x80000001, 0x7, 0x1, 0x2, 0x5, 0x3ff, 0x9, 0x3, 0x2, 0xa, 0x1, 0x8000, 0x76c, 0x4, 0x2, 0x81, 0x7, 0x1], [0x8, 0x6, 0x6, 0x1, 0x6, 0x264, 0x46a4, 0x4, 0x10001, 0x401, 0x0, 0x1, 0x7, 0x0, 0x8, 0xd, 0x91cd, 0x9, 0x1ff, 0xffff3cc8, 0x9, 0x0, 0x3, 0x3, 0x7, 0x7, 0x80000000, 0x8, 0x19, 0x6, 0x9, 0x5, 0x82c, 0x6, 0x1, 0x1, 0x2, 0x3, 0x8, 0x0, 0x7, 0x0, 0x401, 0x1000, 0xfffffffd, 0x9, 0x401, 0x6, 0x0, 0x7, 0x0, 0x68, 0x8, 0x80000001, 0x9, 0x0, 0x9, 0x5, 0xfffffff4, 0x5, 0x0, 0x0, 0x6, 0x4], [0x1, 0x8000005d, 0xf, 0xff, 0xc, 0x0, 0x7fffffff, 0x0, 0x7ff, 0x2, 0x0, 0xf0, 0x2, 0xa48, 0xffffffff, 0x2, 0x10001, 0x10001, 0x0, 0x81, 0x4, 0x5, 0x6, 0x0, 0x3, 0xffffff80, 0xf, 0x5, 0x0, 0x8001, 0x85f, 0x10000, 0x100, 0x401, 0x7, 0xffffffff, 0x8, 0x5, 0xfffff3de, 0x13a, 0x6, 0x7, 0xffff, 0x6, 0xa8822ebd, 0x2, 0x3, 0x101, 0x85, 0x2800000, 0x200, 0xbc6e, 0xe36, 0x4, 0x2, 0xfff, 0x10000, 0x1, 0x0, 0x0, 0x8, 0x3, 0x9, 0x4]}, 0x45c) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r1, &(0x7f0000000400)='transport=loop,nqn=testsubsys,disable_sqflow', 0x2c) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 3.364081455s ago: executing program 3 (id=28): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1e3040, 0x0) r3 = open$dir(&(0x7f0000000340)='./file0\x00', 0x129a40, 0x8a) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x25) getrusage(0xffffffffffffffff, &(0x7f0000000500)) syz_emit_ethernet(0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045f8005e00000000002f907800000000000000002480655800000000004e9ed18dc41114000000100008000100000086dd080088be00000000100000000100000000000000080022eb050000002000000e02000000000000000000000008"], 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESDEC=r3], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000180)=[0x2], 0x0, 0x0, 0x1}}, 0x3c) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004804) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000000c0)=0x319, 0x4) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000001) r9 = dup3(r7, r8, 0x80000) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r1, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d400000026000b00fdffffff0300000007000000c000e98008007b00ac1414bb0800a40047504c001000288008003300", @ANYRES32=r2, @ANYBLOB="040014809a00400036e2e4a92fb703c02a2148adf8fa5ac154abc6970d5cd0298d62feaef63f7032f47678f6881af720ddbe59bc710878e77ed9935e20f0fd0a08b5bb68ad08712d313ff143eb207f1686cba1a9fdce72c63b05adc60a2e81d763a5be554b7ad4e50f4783da9034c36f6fbc57585231f537c6368d246e4f909d1ce949e184315e850971b99268f097bb5488d453de7400000000000000000000139aba51844805813c8651c308654f64a230"], 0xd4}, 0x1, 0x0, 0x0, 0x48014}, 0x8000) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x80000000) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\xab\xec\x0eb', &(0x7f00000005c0)='\x00\xf4\xe1y\xe0\x05\x17\x06>$\xd1\xaa\x00\xaa\xbb7\x8es\xe6\f\xefJ\xc9\xd5\xda[\xaeC>\xdew9\x87u.\xd8\x96\x93\xc7\xca\xbfv\x94\x8b\xaa\x84\xb9w`\x88\xff\xe2\xbdK\xb6\xf3W\"7\xac\x8c\xe33\xa2B\xfd\xa5\xae8\xf7\xdb\xf5\xe2E\x10\b\x02\x00@\xdd\xee\x8a\xd7%)\x05\x1aM\v\x1e\x84\x83\t\x13 \x8c\x06\xf5S\x8d\xf9J[m\x17-\xa7\xeaM\x8fl\xe3?\xfe\xe2ju\xb1r\xadF\xad\xf9\xb5\xc2N\xe7VW\x9e\f\x8e\x1e\xc5\xf3$\x81\x1a\xaf6\xcbOSa\xc7\xe7,\x01\x18:\xf0I\xd7\xac\x8e\xd6\x8d\x16\xed\xd6\x8e\xd4\xf8\xe1\xea\x02y\x7f\x1c\x98mF\xd6:\x8bg', 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000002c0)="28d3") 3.289566014s ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='rd_pages=1024', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\x00', 0x1) r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x141cc0) ioctl$FE_GET_PROPERTY(r2, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000640)=[{0x13, '\x00', @data=0x7, 0xffdf16c8}, {0xd, '\x00', @data=0xfffffff7, 0x7f}, {0x14, '\x00', @data=0xd8f, 0x7}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b01, &(0x7f0000000040)) write(r2, &(0x7f0000000040)="53d1e3fa817540139ccb622c1fc4dba7b86cd4a5d1cb01", 0x17) 3.192941141s ago: executing program 1 (id=30): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000400000000000000000000000850000002000000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r1, 0x4, r1}, 0x7) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000500), 0x4, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffc, 0x2000000, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x0, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) recvmsg(r4, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40000042) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="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"/296, 0x0, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x48) 3.188562463s ago: executing program 0 (id=31): r0 = socket$netlink(0x10, 0x3, 0x14) socket(0x1, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r2, 0x7000000) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000880)=""/41, 0x29}], 0x1, 0x7, 0xffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x100000000, 0x4004) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0xe8, 0x80000, r0}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8dd, 0x12) bind$xdp(r3, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) r4 = eventfd2(0x0, 0x1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000440)) read$eventfd(r4, &(0x7f0000000400), 0x8) writev(r4, &(0x7f0000000340)=[{0x0}], 0x1) recvmmsg(r1, &(0x7f0000000140), 0x0, 0x40002100, 0x0) set_mempolicy(0x3, 0x0, 0x8) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4014f50b, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) 3.151396042s ago: executing program 1 (id=32): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x20004841) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000838000/0x2000)=nil, 0x2000, 0xa, 0x10010, r1, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r2, &(0x7f0000012640)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x2a401) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r4, 0x1ff, 0x0, 0x12000, 0x3, [], [0x0, 0x0, 0x3], [0x0, 0x1001000, 0x800001, 0x4], [0x0, 0x401, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06464ce, &(0x7f0000000380)={r4, 0x8, 0x7fff, 0x18d, 0x3, [], [0xfffffffb, 0x9, 0xfffff176], [0xf84, 0x5, 0x9, 0x49], [0xffffffff, 0x40, 0x9, 0x5]}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d08, &(0x7f0000000180)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r10 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f00000002c0)={r8, 0x9, 0x10}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000100)={0xdb, 0x8, 0x3, 0x10001, r11}, &(0x7f0000000340)=0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x7, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x7, 0x8000000000000003, 0xc595, 0x8, 0x4, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.003839706s ago: executing program 1 (id=33): r0 = eventfd2(0x0, 0x1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setresuid(0x0, 0xee00, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x9) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f3, 0x0, 0x0, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDMKTONE(r4, 0x4b30, 0x7fffffff) r5 = syz_io_uring_setup(0x9d7, &(0x7f0000000480)={0x0, 0x8550, 0x3100, 0x0, 0x1d5}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r5, 0x1, 0x1, 0x61, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) socket$kcm(0x2, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4020000000000006118500000000000850000012700000095000000000110003e3cc2420c325d9e913f72849646bd2715a7bac51323c3ff9f9a6ee33869326224b282a04a15a358dbc69e0b15f34f075610"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl(r10, 0x40946400, &(0x7f0000000100)="70633231326500000000000000000000000000000003") ioctl$COMEDI_INSN(r10, 0x8028250c, 0x0) write$binfmt_script(r9, 0x0, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f0000000440)={0xb0000009}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="569534ab1bbe0e03", 0x8}], 0x1) 2.40942491s ago: executing program 2 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000005c0)={0x101ff, 0x0, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x7ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.099460448s ago: executing program 0 (id=35): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1e3040, 0x0) r3 = open$dir(&(0x7f0000000340)='./file0\x00', 0x129a40, 0x8a) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x25) getrusage(0xffffffffffffffff, &(0x7f0000000500)) syz_emit_ethernet(0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045f8005e00000000002f907800000000000000002480655800000000004e9ed18dc41114000000100008000100000086dd080088be00000000100000000100000000000000080022eb050000002000000e02000000000000000000000008"], 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, 0x0, 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004804) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000000c0)=0x319, 0x4) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000001) r9 = dup3(r7, r8, 0x80000) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r1, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d400000026000b00fdffffff0300000007000000c000e98008007b00ac1414bb0800a40047504c001000288008003300", @ANYRES32=r2, @ANYBLOB="040014809a00400036e2e4a92fb703c02a2148adf8fa5ac154abc6970d5cd0298d62feaef63f7032f47678f6881af720ddbe59bc710878e77ed9935e20f0fd0a08b5bb68ad08712d313ff143eb207f1686cba1a9fdce72c63b05adc60a2e81d763a5be554b7ad4e50f4783da9034c36f6fbc57585231f537c6368d246e4f909d1ce949e184315e850971b99268f097bb5488d453de7400000000000000000000139aba51844805813c8651c308654f64a230"], 0xd4}, 0x1, 0x0, 0x0, 0x48014}, 0x8000) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x80000000) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\xab\xec\x0eb', &(0x7f00000005c0)='\x00\xf4\xe1y\xe0\x05\x17\x06>$\xd1\xaa\x00\xaa\xbb7\x8es\xe6\f\xefJ\xc9\xd5\xda[\xaeC>\xdew9\x87u.\xd8\x96\x93\xc7\xca\xbfv\x94\x8b\xaa\x84\xb9w`\x88\xff\xe2\xbdK\xb6\xf3W\"7\xac\x8c\xe33\xa2B\xfd\xa5\xae8\xf7\xdb\xf5\xe2E\x10\b\x02\x00@\xdd\xee\x8a\xd7%)\x05\x1aM\v\x1e\x84\x83\t\x13 \x8c\x06\xf5S\x8d\xf9J[m\x17-\xa7\xeaM\x8fl\xe3?\xfe\xe2ju\xb1r\xadF\xad\xf9\xb5\xc2N\xe7VW\x9e\f\x8e\x1e\xc5\xf3$\x81\x1a\xaf6\xcbOSa\xc7\xe7,\x01\x18:\xf0I\xd7\xac\x8e\xd6\x8d\x16\xed\xd6\x8e\xd4\xf8\xe1\xea\x02y\x7f\x1c\x98mF\xd6:\x8bg', 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000002c0)="28d3") 2.043485576s ago: executing program 3 (id=36): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/73, 0x49}], 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c40)={0x0, 0x1a00000000000, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001300)={r4, "beb6addd7dcf28313724e5ee51bef465"}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) socket$netlink(0x10, 0x3, 0x15) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES64=r3, @ANYRES8=r5, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="040000181100"/20, @ANYRES32=r7, @ANYRESDEC=r8], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r9, r6, 0x25, 0x9, @val=@uprobe_multi={&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)=[0x0, 0x9, 0x8, 0x6, 0x5, 0x3, 0x4], &(0x7f0000000400)=[0x4, 0x5, 0x5, 0x5, 0x4], 0x8a, 0x7, 0x0, r1}}, 0x3c) syz_emit_ethernet(0x39, &(0x7f0000000640)=ANY=[], 0x0) setns(0xc9, 0x0) r10 = socket(0x2a, 0x2, 0x9) connect(r10, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80) write$nbd(r10, 0x0, 0x0) 1.93504206s ago: executing program 1 (id=37): syz_open_dev$video(0x0, 0x8, 0x68ab83) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) open(&(0x7f0000000000)='./file0\x00', 0x305001, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0xc) r3 = fsmount(r1, 0x0, 0x2) socket$packet(0x11, 0x2, 0x300) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000) 1.020817382s ago: executing program 3 (id=38): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x40032, 0x0, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r6, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000300)={0x58, 0x0, 0x68}) tkill(r5, 0x7) sched_setscheduler(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = msgget(0x0, 0x211) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000240)={{0x0, r1, r2, r1, r2, 0x1, 0x1f}, 0x0, 0x0, 0x2, 0x1, 0x8, 0x8000, 0x1000, 0x4, 0xfffc, 0x1, r0, r0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) 927.790294ms ago: executing program 2 (id=39): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) 882.516191ms ago: executing program 2 (id=40): syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda6d, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1492) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @local=@item_012={0x1, 0x2, 0x4, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "40adf43f"}]}}, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) connect$inet(r1, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, 0x0) 787.870351ms ago: executing program 1 (id=41): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1e3040, 0x0) r3 = open$dir(&(0x7f0000000340)='./file0\x00', 0x129a40, 0x8a) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x25) getrusage(0xffffffffffffffff, &(0x7f0000000500)) syz_emit_ethernet(0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045f8005e00000000002f907800000000000000002480655800000000004e9ed18dc41114000000100008000100000086dd080088be00000000100000000100000000000000080022eb050000002000000e02000000000000000000000008"], 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESDEC=r3], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004804) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000000c0)=0x319, 0x4) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000001) r9 = dup3(r7, r8, 0x80000) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r1, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d400000026000b00fdffffff0300000007000000c000e98008007b00ac1414bb0800a40047504c0010002880080033", @ANYRES32=r2, @ANYBLOB="040014809a00400036e2e4a92fb703c02a2148adf8fa5ac154abc6970d5cd0298d62feaef63f7032f47678f6881af720ddbe59bc710878e77ed9935e20f0fd0a08b5bb68ad08712d313ff143eb207f1686cba1a9fdce72c63b05adc60a2e81d763a5be554b7ad4e50f4783da9034c36f6fbc57585231f537c6368d246e4f909d1ce949e184315e850971b99268f097bb5488d453de7400000000000000000000139aba51844805813c8651c308654f64a230"], 0xd4}, 0x1, 0x0, 0x0, 0x48014}, 0x8000) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x80000000) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\xab\xec\x0eb', &(0x7f00000005c0)='\x00\xf4\xe1y\xe0\x05\x17\x06>$\xd1\xaa\x00\xaa\xbb7\x8es\xe6\f\xefJ\xc9\xd5\xda[\xaeC>\xdew9\x87u.\xd8\x96\x93\xc7\xca\xbfv\x94\x8b\xaa\x84\xb9w`\x88\xff\xe2\xbdK\xb6\xf3W\"7\xac\x8c\xe33\xa2B\xfd\xa5\xae8\xf7\xdb\xf5\xe2E\x10\b\x02\x00@\xdd\xee\x8a\xd7%)\x05\x1aM\v\x1e\x84\x83\t\x13 \x8c\x06\xf5S\x8d\xf9J[m\x17-\xa7\xeaM\x8fl\xe3?\xfe\xe2ju\xb1r\xadF\xad\xf9\xb5\xc2N\xe7VW\x9e\f\x8e\x1e\xc5\xf3$\x81\x1a\xaf6\xcbOSa\xc7\xe7,\x01\x18:\xf0I\xd7\xac\x8e\xd6\x8d\x16\xed\xd6\x8e\xd4\xf8\xe1\xea\x02y\x7f\x1c\x98mF\xd6:\x8bg', 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000002c0)="28d3") 587.815431ms ago: executing program 0 (id=42): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1e3040, 0x0) r3 = open$dir(&(0x7f0000000340)='./file0\x00', 0x129a40, 0x8a) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x25) getrusage(0xffffffffffffffff, &(0x7f0000000500)) syz_emit_ethernet(0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045f8005e00000000002f907800000000000000002480655800000000004e9ed18dc41114000000100008000100000086dd080088be00000000100000000100000000000000080022eb050000002000000e02000000000000000000000008"], 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESDEC=r3], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004804) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f00000000c0)=0x319, 0x4) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000001) r9 = dup3(r7, r8, 0x80000) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r1, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d400000026000b00fdffffff0300000007000000c000e98008007b00ac1414bb0800a40047504c001000288008003300", @ANYRES32=r2, @ANYBLOB="040014809a00400036e2e4a92fb703c02a2148adf8fa5ac154abc6970d5cd0298d62feaef63f7032f47678f6881af720ddbe59bc710878e77ed9935e20f0fd0a08b5bb68ad08712d313ff143eb207f1686cba1a9fdce72c63b05adc60a2e81d763a5be554b7ad4e50f4783da9034c36f6fbc57585231f537c6368d246e4f909d1ce949e184315e850971b99268f097bb5488d453de7400000000000000000000139aba51844805813c8651c308654f64a230"], 0xd4}, 0x1, 0x0, 0x0, 0x48014}, 0x8000) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x80000000) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\xab\xec\x0eb', &(0x7f00000005c0)='\x00\xf4\xe1y\xe0\x05\x17\x06>$\xd1\xaa\x00\xaa\xbb7\x8es\xe6\f\xefJ\xc9\xd5\xda[\xaeC>\xdew9\x87u.\xd8\x96\x93\xc7\xca\xbfv\x94\x8b\xaa\x84\xb9w`\x88\xff\xe2\xbdK\xb6\xf3W\"7\xac\x8c\xe33\xa2B\xfd\xa5\xae8\xf7\xdb\xf5\xe2E\x10\b\x02\x00@\xdd\xee\x8a\xd7%)\x05\x1aM\v\x1e\x84\x83\t\x13 \x8c\x06\xf5S\x8d\xf9J[m\x17-\xa7\xeaM\x8fl\xe3?\xfe\xe2ju\xb1r\xadF\xad\xf9\xb5\xc2N\xe7VW\x9e\f\x8e\x1e\xc5\xf3$\x81\x1a\xaf6\xcbOSa\xc7\xe7,\x01\x18:\xf0I\xd7\xac\x8e\xd6\x8d\x16\xed\xd6\x8e\xd4\xf8\xe1\xea\x02y\x7f\x1c\x98mF\xd6:\x8bg', 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000002c0)="28d3") 520.361918ms ago: executing program 3 (id=43): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioprio_get$pid(0x1, 0xffffffffffffffff) ioctl(r0, 0xc4c85512, &(0x7f0000000200)="000000000200000000000000000000004c696e6520566f6c756d65") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000140)=0xfb78, 0x4) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r3}, @fd, @flat=@binder={0x73622a85, 0x2000, 0x2}}, &(0x7f0000000140)={0x0, 0x1e, 0x30}}}], 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x5) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x81899, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x4) open_tree(r1, &(0x7f0000000080)='./file0/../file0\x00', 0x1101) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r7, 0x10000, 0x32, 0x0, 0x0) 205.396678ms ago: executing program 3 (id=44): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x68ab83) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) open(&(0x7f0000000000)='./file0\x00', 0x305001, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0xc) r3 = fsmount(r1, 0x0, 0x2) socket$packet(0x11, 0x2, 0x300) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000) 0s ago: executing program 3 (id=45): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) r1 = syz_io_uring_setup(0x43bb, &(0x7f0000000040)={0x0, 0x3a99, 0x40, 0x0, 0x2a5, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) open_by_handle_at(r1, &(0x7f0000000280)=@reiserfs_3={0xc, 0x3, {0xa1c6, 0x200, 0x7}}, 0x101000) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xefa9, 0x800, 0x43, 0x161}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xffff}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x82}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x101}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x3ff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x400000}, {0x5}, {}, {}, {0x0, 0x0, 0x9, 0xfffffffd}, {}, {0x0, 0xb}, {}, {0x0, 0x0, 0x7}, {0x0, 0x2000000, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xc16}, {}, {}, {0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x400000}, {0x100}, {0x0, 0xfffffffc, 0x65040211}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x70}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x6, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8a}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) syz_clone3(0x0, 0x0) read$FUSE(r2, &(0x7f0000002f40)={0x2020}, 0xfffffd24) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) close_range(0xffffffffffffffff, r4, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r9 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x20000, 0x3800, 0x4}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000000180)="5eb7f1714b930f90e1f62d10c51aed8630a6c4c8dc5b779d05ff6774ad12bf9ecd66406027dcc8d16cb76e8c38c9082bb1426b9686a03fc52432dd1e12e626cb37f8fcdc2239840f7d7a067d39834eb349e3032e743479b1e7df3c", 0xfec2}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30192' (ED25519) to the list of known hosts. [ 33.067381][ T5671] cgroup: Unknown subsys name 'net' [ 33.183771][ T5671] cgroup: Unknown subsys name 'cpuset' [ 33.186427][ T5671] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.066472][ T5671] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.941729][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.944609][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.945060][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.945522][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.945793][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.947084][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.949482][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.954207][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.954908][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.955428][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.956716][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.957138][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.959126][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.960162][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.960209][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.960840][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.961677][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.961951][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.962434][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.962893][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.500706][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.501149][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.501251][ T5731] bridge_slave_0: entered allmulticast mode [ 38.502943][ T5731] bridge_slave_0: entered promiscuous mode [ 38.504990][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.505034][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.505089][ T5731] bridge_slave_1: entered allmulticast mode [ 38.505838][ T5731] bridge_slave_1: entered promiscuous mode [ 38.546891][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.546934][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.546991][ T5733] bridge_slave_0: entered allmulticast mode [ 38.547695][ T5733] bridge_slave_0: entered promiscuous mode [ 38.548830][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.548868][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.548920][ T5733] bridge_slave_1: entered allmulticast mode [ 38.550317][ T5733] bridge_slave_1: entered promiscuous mode [ 38.559168][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.578611][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.597777][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.606525][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.606605][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.606661][ T5732] bridge_slave_0: entered allmulticast mode [ 38.607410][ T5732] bridge_slave_0: entered promiscuous mode [ 38.627763][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.637648][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.637689][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.637744][ T5732] bridge_slave_1: entered allmulticast mode [ 38.638412][ T5732] bridge_slave_1: entered promiscuous mode [ 38.645770][ T5731] team0: Port device team_slave_0 added [ 38.672437][ T5731] team0: Port device team_slave_1 added [ 38.677965][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.679414][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.688366][ T5733] team0: Port device team_slave_0 added [ 38.705873][ T5733] team0: Port device team_slave_1 added [ 38.732528][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.732539][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.732552][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.739068][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.739110][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.739168][ T5744] bridge_slave_0: entered allmulticast mode [ 38.739914][ T5744] bridge_slave_0: entered promiscuous mode [ 38.740856][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.740865][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.740876][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.741847][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.741854][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.741865][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.742849][ T5732] team0: Port device team_slave_0 added [ 38.746552][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.746559][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.746571][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.747083][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.747121][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.747346][ T5744] bridge_slave_1: entered allmulticast mode [ 38.748048][ T5744] bridge_slave_1: entered promiscuous mode [ 38.755799][ T5732] team0: Port device team_slave_1 added [ 38.791481][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.795907][ T5733] hsr_slave_0: entered promiscuous mode [ 38.796351][ T5733] hsr_slave_1: entered promiscuous mode [ 38.797632][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.797640][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.797652][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.803974][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.812390][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.812399][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.812412][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.836319][ T5731] hsr_slave_0: entered promiscuous mode [ 38.836778][ T5731] hsr_slave_1: entered promiscuous mode [ 38.837076][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 38.837120][ T5731] Cannot create hsr debugfs directory [ 38.858281][ T5744] team0: Port device team_slave_0 added [ 38.859562][ T5744] team0: Port device team_slave_1 added [ 38.896149][ T5732] hsr_slave_0: entered promiscuous mode [ 38.896534][ T5732] hsr_slave_1: entered promiscuous mode [ 38.896798][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 38.896809][ T5732] Cannot create hsr debugfs directory [ 38.902999][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.903008][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.903024][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.915857][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.915866][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.915879][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.015806][ T5744] hsr_slave_0: entered promiscuous mode [ 39.016232][ T5744] hsr_slave_1: entered promiscuous mode [ 39.016520][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 39.016531][ T5744] Cannot create hsr debugfs directory [ 39.088653][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.094776][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.104025][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.108634][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.112692][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.118869][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.136282][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.138497][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.172388][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.174872][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.175426][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.180080][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.184292][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.188204][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.189242][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.189290][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.189489][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.189543][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.192768][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.196245][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.238858][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.238943][ T5732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.239044][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.239086][ T5732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.249249][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.254181][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.254808][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.260385][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.261982][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.265449][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.265836][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.269669][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.296021][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.296682][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.298461][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.299302][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.332813][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.344735][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.346813][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.347721][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.349620][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.366141][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.368135][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.369908][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.372635][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.375160][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.379778][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.379824][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.398395][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.398473][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.433407][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.470294][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.481772][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.481818][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.491833][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.491876][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.514047][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.529438][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.542137][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.553907][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.567694][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.567739][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.568915][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.568956][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.578575][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.578625][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.587597][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.587644][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.820768][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.844939][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.863624][ T5733] veth0_vlan: entered promiscuous mode [ 39.878145][ T5733] veth1_vlan: entered promiscuous mode [ 39.879424][ T5732] veth0_vlan: entered promiscuous mode [ 39.885526][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.890612][ T5732] veth1_vlan: entered promiscuous mode [ 39.898934][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.917002][ T5733] veth0_macvtap: entered promiscuous mode [ 39.919660][ T5733] veth1_macvtap: entered promiscuous mode [ 39.949100][ T5732] veth0_macvtap: entered promiscuous mode [ 39.958236][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.958323][ T5731] veth0_vlan: entered promiscuous mode [ 39.966999][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.968743][ T5732] veth1_macvtap: entered promiscuous mode [ 39.980704][ T5731] veth1_vlan: entered promiscuous mode [ 40.003671][ T5743] Bluetooth: hci3: command tx timeout [ 40.003806][ T5743] Bluetooth: hci1: command tx timeout [ 40.003878][ T5743] Bluetooth: hci2: command tx timeout [ 40.003947][ T5743] Bluetooth: hci0: command tx timeout [ 40.004972][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.006441][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.010113][ T5744] veth0_vlan: entered promiscuous mode [ 40.014996][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.017093][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.038963][ T5744] veth1_vlan: entered promiscuous mode [ 40.058521][ T5731] veth0_macvtap: entered promiscuous mode [ 40.077458][ T5731] veth1_macvtap: entered promiscuous mode [ 40.117931][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.133849][ T5744] veth0_macvtap: entered promiscuous mode [ 40.139957][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.152872][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.152889][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.155031][ T5744] veth1_macvtap: entered promiscuous mode [ 40.178188][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.178205][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.211343][ T5882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.211404][ T5882] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.211431][ T5882] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.211458][ T5882] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.211554][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.211582][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.211609][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220333][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.221453][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.221468][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.239189][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.251231][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.251267][ T5882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.251295][ T5882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.257110][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.257124][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.288874][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.288893][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.323056][ T5732] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.342184][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.342202][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.352922][ T5732] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.357146][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.357156][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.360456][ T5732] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.369935][ T5732] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.380268][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.380287][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.388193][ T5733] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.391105][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.391311][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.391330][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.391347][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.850335][ T5897] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 40.850379][ T5897] netlink: 'syz.1.2': attribute type 268 has an invalid length. [ 40.850473][ T5897] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2'. [ 40.868146][ T5880] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 41.043581][ T5880] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 41.045539][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 41.045684][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.049742][ T5880] usb 7-1: config 0 descriptor?? [ 41.057166][ T5880] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 41.259767][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.260034][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.335463][ T43] audit: type=1804 audit(1789089668.802:2): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/file0" dev="tmpfs" ino=18 res=1 errno=0 [ 41.340097][ T5817] usb 7-1: USB disconnect, device number 2 [ 41.654956][ T5906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'. [ 41.841252][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 42.005496][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 42.005515][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 42.007460][ T9] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 42.007484][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 42.007497][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 42.007516][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.010803][ T5903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.012174][ T9] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 42.042180][ T64] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 42.054522][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 42.057810][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 42.057892][ T9] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 42.063886][ T9] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 42.081451][ T64] Bluetooth: hci0: command tx timeout [ 42.081499][ T64] Bluetooth: hci2: command tx timeout [ 42.082025][ T64] Bluetooth: hci1: command tx timeout [ 42.083396][ T64] Bluetooth: hci3: command tx timeout [ 42.239215][ T5916] ÿÿÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 42.428854][ T5918] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 42.428978][ T5918] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 42.442296][ T5880] usb 5-1: USB disconnect, device number 2 [ 42.468079][ T5880] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 42.482257][ T5880] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 42.482698][ T5880] keyspan 5-1:1.0: device disconnected [ 42.860495][ T38] IPVS: starting estimator thread 0... [ 42.869426][ T5925] netlink: 88 bytes leftover after parsing attributes in process `syz.1.13'. [ 42.940990][ T5926] IPVS: using max 43 ests per chain, 103200 per kthread [ 42.971298][ T1342] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 43.029795][ T5930] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (eth1) [ 43.125275][ T1342] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 43.138051][ T1342] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 43.138362][ T1342] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.403709][ T1342] usb 7-1: config 0 descriptor?? [ 43.706572][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.707031][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.117715][ T43] audit: type=1804 audit(1789089671.582:3): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.14" name="/newroot/4/file0" dev="tmpfs" ino=40 res=1 errno=0 [ 44.151042][ T5810] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.161582][ T5743] Bluetooth: hci3: command tx timeout [ 44.161609][ T5743] Bluetooth: hci1: command tx timeout [ 44.161624][ T5743] Bluetooth: hci2: command tx timeout [ 44.161639][ T5743] Bluetooth: hci0: command tx timeout [ 44.227638][ T1342] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 44.279983][ T5737] usb 7-1: USB disconnect, device number 3 [ 44.321723][ T5810] usb 5-1: Using ep0 maxpacket: 8 [ 44.322312][ T5810] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 44.323329][ T5810] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 44.323346][ T5810] usb 5-1: config 0 has no interface number 0 [ 44.323394][ T5810] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 44.323411][ T5810] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 44.323428][ T5810] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 44.323475][ T5810] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 44.323531][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.325292][ T5810] usb 5-1: config 0 descriptor?? [ 44.342565][ T5810] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 44.343374][ T5938] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 44.531016][ T1342] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 44.691131][ T1349] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 44.711437][ T1342] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 44.712211][ T1342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.712233][ T1342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.713716][ T1342] usb 6-1: config 0 descriptor?? [ 44.862068][ T1349] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 44.863796][ T1349] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.863827][ T1349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.867309][ T1349] usb 8-1: config 0 descriptor?? [ 44.923515][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.923942][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.949077][ T5946] Console: switching to colour dummy device 80x25 [ 44.993328][ T43] audit: type=1804 audit(1789089672.462:4): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.18" name="/newroot/3/file0" dev="tmpfs" ino=34 res=1 errno=0 [ 45.079741][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.080111][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.146688][ T43] audit: type=1804 audit(1789089672.612:5): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.19" name="/newroot/6/file0" dev="tmpfs" ino=49 res=1 errno=0 [ 45.218815][ T1342] usbhid 6-1:0.0: can't add hid device: -71 [ 45.218868][ T1342] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 45.220015][ T1342] usb 6-1: USB disconnect, device number 2 [ 45.377838][ T1349] usbhid 8-1:0.0: can't add hid device: -71 [ 45.377960][ T1349] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 45.379901][ T1349] usb 8-1: USB disconnect, device number 2 [ 45.869485][ T43] audit: type=1326 audit(1789089673.332:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 45.871600][ T43] audit: type=1326 audit(1789089673.332:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 45.871740][ T43] audit: type=1326 audit(1789089673.342:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.21" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf700efec code=0x7ffc0000 [ 45.872750][ T43] audit: type=1326 audit(1789089673.342:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 45.913896][ T43] audit: type=1326 audit(1789089673.372:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.21" exe="/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf700efec code=0x7ffc0000 [ 45.941765][ T43] audit: type=1326 audit(1789089673.412:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.21" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 46.082877][ T5810] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 46.231000][ T5810] usb 7-1: Using ep0 maxpacket: 8 [ 46.231712][ T5810] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 46.232608][ T5810] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 46.232627][ T5810] usb 7-1: config 0 has no interface number 0 [ 46.232654][ T5810] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 46.232672][ T5810] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 46.232690][ T5810] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 46.232710][ T5810] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 46.232740][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.237185][ T5810] usb 7-1: config 0 descriptor?? [ 46.241024][ T64] Bluetooth: hci0: command tx timeout [ 46.241043][ T5743] Bluetooth: hci2: command tx timeout [ 46.241046][ T64] Bluetooth: hci1: command tx timeout [ 46.241062][ T64] Bluetooth: hci3: command tx timeout [ 46.245274][ T5810] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 46.766499][ T1342] usb 5-1: USB disconnect, device number 3 [ 46.774187][ T1342] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 46.807498][ T5964] sctp: [Deprecated]: syz.1.24 (pid 5964) Use of int in max_burst socket option. [ 46.807498][ T5964] Use struct sctp_assoc_value instead [ 46.809903][ T5964] sctp: [Deprecated]: syz.1.24 (pid 5964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 46.809903][ T5964] Use struct sctp_sack_info instead [ 46.940512][ T5963] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 47.767469][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27'. [ 47.821115][ T74] nvmet: connect request for invalid subsystem testsubsys! [ 47.821488][ T5975] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 48.007589][ T5982] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.067156][ T5986] netlink: 144 bytes leftover after parsing attributes in process `syz.1.30'. [ 48.067702][ T5986] netlink: 144 bytes leftover after parsing attributes in process `syz.1.30'. [ 48.140987][ T5881] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 48.292754][ T5881] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 48.293557][ T5881] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 48.293577][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.294710][ T5881] usb 8-1: config 0 descriptor?? [ 48.299457][ T5881] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 48.415965][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 48.415982][ T43] audit: type=1326 audit(1789089675.882:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.1.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 48.416020][ T43] audit: type=1326 audit(1789089675.882:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.1.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 48.420058][ T43] audit: type=1326 audit(1789089675.882:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.1.33" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf700efec code=0x7ffc0000 [ 48.430129][ T43] audit: type=1326 audit(1789089675.892:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.1.33" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700efec code=0x7ffc0000 [ 48.437905][ T43] audit: type=1326 audit(1789089675.902:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.1.33" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700efec code=0x7ffc0000 [ 48.448849][ T43] audit: type=1326 audit(1789089675.912:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.1.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 48.449179][ T43] audit: type=1326 audit(1789089675.912:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.1.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 48.513433][ T43] audit: type=1326 audit(1789089675.982:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.1.33" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71475ab code=0x7ffc0000 [ 48.516899][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.517095][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.518041][ T43] audit: type=1326 audit(1789089675.982:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.1.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 48.519143][ T43] audit: type=1326 audit(1789089675.982:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5993 comm="syz.1.33" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 48.632281][ T5881] usb 8-1: USB disconnect, device number 3 [ 48.813276][ T5810] usb 7-1: USB disconnect, device number 4 [ 48.815635][ T5810] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 49.411160][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.592120][ T5880] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 49.595177][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 49.595550][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.624677][ T5880] usb 5-1: config 0 descriptor?? [ 49.642880][ T5880] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 49.870602][ T6003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.880674][ T6003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.106825][ T5880] usb 5-1: USB disconnect, device number 4 [ 50.546829][ T6014] virtio_blk virtio2: 1/0/0 default/read/poll queues [ 50.549491][ T6014] virtio_blk virtio2: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 50.641151][ T1349] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 50.701005][ T5838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 50.801937][ T1349] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.802939][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.802960][ T1349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.802971][ T1349] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.802990][ T1349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.805197][ T1349] usb 7-1: config 0 descriptor?? [ 50.851669][ T5838] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 50.852602][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.852638][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.854629][ T5838] usb 6-1: config 0 descriptor?? [ 50.901007][ T5810] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.053758][ T5810] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 51.055097][ T5810] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 51.055129][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.057561][ T5810] usb 5-1: config 0 descriptor?? [ 51.069149][ T5810] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 51.078370][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.080070][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.236920][ T1349] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 51.278749][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.279714][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.400443][ T5838] usbhid 6-1:0.0: can't add hid device: -71 [ 51.400527][ T5838] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 51.414121][ T5838] usb 6-1: USB disconnect, device number 3 qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) [ 51.466148][ T6038] ------------[ cut here ]------------ [ 51.466158][ T6038] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'pc212e' [ 51.466167][ T6038] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#1: syz.3.45/6038 [ 51.474359][ T6038] Modules linked in: [ 51.475778][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.3.45 Not tainted syzkaller #0 PREEMPT(full) [ 51.480020][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.484640][ T6038] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 51.486870][ T6038] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 1f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 cc ed 4a ff 48 8d 7d 18 48 b8 00 [ 51.494297][ T6038] RSP: 0018:ffffc9000707f6a0 EFLAGS: 00010246 [ 51.496361][ T6038] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804e7114dc [ 51.499671][ T6038] RDX: ffff88801d3205dc RSI: ffffffff8c0b6640 RDI: ffffffff914b9310 [ 51.502402][ T6038] RBP: ffff88804e7114b8 R08: ffff88804e710adc R09: ffffed1009ce2283 [ 51.504866][ T6038] R10: ffff88804e71141b R11: 0000000000000000 R12: ffff88804e711400 [ 51.507992][ T6038] R13: ffff88801d320500 R14: ffff88804e710ab8 R15: dffffc0000000000 [ 51.511590][ T6038] FS: 0000000000000000(0000) GS:ffff888096a60000(0063) knlGS:00000000f5114b40 [ 51.514656][ T6038] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 51.517919][ T6038] CR2: 000056153d859088 CR3: 00000000702d3000 CR4: 0000000000352ef0 [ 51.521787][ T6038] Call Trace: [ 51.523613][ T6038] [ 51.524946][ T6038] ? __pfx_remove_proc_entry+0x10/0x10 [ 51.527280][ T6038] ? mtree_load+0x3a4/0xb50 [ 51.529290][ T6038] ? __pfx_mtree_load+0x10/0x10 [ 51.531779][ T6038] ? rcu_is_watching+0x13/0xc0 [ 51.533863][ T6038] unregister_irq_proc+0x206/0x2a0 [ 51.536017][ T6038] ? __pfx_unregister_irq_proc+0x10/0x10 [ 51.538539][ T6038] free_desc+0x89/0x330 [ 51.540399][ T6038] ? __pfx_free_desc+0x10/0x10 [ 51.542407][ T6038] ? kasan_quarantine_put+0x104/0x240 [ 51.544112][ T6038] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.546098][ T6038] ? irq_domain_free_irqs+0x400/0x5c0 [ 51.548188][ T6038] irq_free_descs+0x84/0xc0 [ 51.549924][ T6038] irq_domain_free_irqs+0x46a/0x5c0 [ 51.552244][ T6038] mp_unmap_irq+0xf8/0x130 [ 51.554446][ T6038] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 51.556649][ T6038] acpi_unregister_gsi_ioapic+0x40/0x60 [ 51.558338][ T6038] acpi_unregister_gsi+0x25/0x40 [ 51.559846][ T6038] acpi_pci_irq_disable+0x275/0x360 [ 51.561656][ T6038] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 51.563419][ T6038] pcibios_disable_device+0x89/0xb0 [ 51.565039][ T6038] do_pci_disable_device+0x9f/0x100 [ 51.566663][ T6038] ? __pfx_do_pci_disable_device+0x10/0x10 [ 51.568520][ T6038] pci_disable_device+0x130/0x270 [ 51.570101][ T6038] pci_device_remove+0xb2/0x1d0 [ 51.571854][ T6038] ? __pfx_pci_device_remove+0x10/0x10 [ 51.573640][ T6038] device_remove+0xcb/0x180 [ 51.575087][ T6038] device_release_driver_internal+0x44e/0x620 [ 51.577012][ T6038] pci_stop_bus_device+0x120/0x160 [ 51.578626][ T6038] pci_stop_and_remove_bus_device+0x58/0xa0 [ 51.580503][ T6038] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 51.582719][ T6038] remove_store+0x123/0x140 [ 51.584178][ T6038] ? __pfx_remove_store+0x10/0x10 [ 51.585771][ T6038] ? find_held_lock+0x2b/0x80 [ 51.587288][ T6038] ? sysfs_file_kobj+0xe4/0x290 [ 51.588829][ T6038] ? sysfs_file_kobj+0xe4/0x290 [ 51.590369][ T6038] ? __pfx_remove_store+0x10/0x10 [ 51.592188][ T6038] dev_attr_store+0x58/0x80 [ 51.593630][ T6038] ? __pfx_dev_attr_store+0x10/0x10 [ 51.595277][ T6038] sysfs_kf_write+0xf2/0x150 [ 51.596756][ T6038] kernfs_fop_write_iter+0x3e0/0x5f0 [ 51.598425][ T6038] ? __pfx_sysfs_kf_write+0x10/0x10 [ 51.600080][ T6038] vfs_write+0x6af/0x1050 [ 51.601715][ T6038] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 51.603564][ T6038] ? __pfx_vfs_write+0x10/0x10 [ 51.605077][ T6038] ? find_held_lock+0x2b/0x80 [ 51.606577][ T6038] ksys_write+0x12a/0x250 [ 51.607959][ T6038] ? __pfx_ksys_write+0x10/0x10 [ 51.609501][ T6038] __do_fast_syscall_32+0x13a/0x8b0 [ 51.611333][ T6038] do_fast_syscall_32+0x32/0x70 [ 51.612834][ T6038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.614768][ T6038] RIP: 0023:0xf7f95fec [ 51.616044][ T6038] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 51.618031][ T6038] RSP: 002b:00000000f511450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 51.620783][ T6038] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000400 [ 51.623334][ T6038] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.625737][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.628140][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.630561][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.633800][ T6038] [ 51.634771][ T6038] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.637006][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.3.45 Not tainted syzkaller #0 PREEMPT(full) [ 51.639703][ T6038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.642797][ T6038] Call Trace: [ 51.643840][ T6038] [ 51.644699][ T6038] dump_stack_lvl+0x100/0x190 [ 51.646078][ T6038] vpanic+0x553/0x970 [ 51.647265][ T6038] ? __pfx_vpanic+0x10/0x10 [ 51.648622][ T6038] panic+0xd1/0xe0 [ 51.649740][ T6038] ? __pfx_panic+0x10/0x10 [ 51.651083][ T6038] check_panic_on_warn.cold+0x19/0x34 [ 51.652768][ T6038] ? remove_proc_entry+0x4e7/0x610 [ 51.654376][ T6038] __warn.cold+0x191/0x318 [ 51.655771][ T6038] __report_bug+0x30f/0x440 [ 51.657219][ T6038] ? remove_proc_entry+0x4e7/0x610 [ 51.658828][ T6038] ? __pfx___report_bug+0x10/0x10 [ 51.660431][ T6038] ? __do_fast_syscall_32+0x13a/0x8b0 [ 51.662132][ T6038] ? do_raw_spin_lock+0x128/0x260 [ 51.663730][ T6038] ? find_held_lock+0x2b/0x80 [ 51.665214][ T6038] ? proc_entry_rundown+0x158/0x1e0 [ 51.666863][ T6038] ? proc_entry_rundown+0x158/0x1e0 [ 51.668512][ T6038] report_bug_entry+0xe2/0x290 [ 51.670021][ T6038] ? remove_proc_entry+0x4f5/0x610 [ 51.671640][ T6038] handle_bug+0x1cd/0x2a0 [ 51.673002][ T6038] exc_invalid_op+0x17/0x50 [ 51.674448][ T6038] asm_exc_invalid_op+0x1a/0x20 [ 51.676038][ T6038] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 51.677833][ T6038] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 1f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 cc ed 4a ff 48 8d 7d 18 48 b8 00 [ 51.683767][ T6038] RSP: 0018:ffffc9000707f6a0 EFLAGS: 00010246 [ 51.685788][ T6038] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804e7114dc [ 51.688324][ T6038] RDX: ffff88801d3205dc RSI: ffffffff8c0b6640 RDI: ffffffff914b9310 [ 51.690789][ T6038] RBP: ffff88804e7114b8 R08: ffff88804e710adc R09: ffffed1009ce2283 [ 51.693277][ T6038] R10: ffff88804e71141b R11: 0000000000000000 R12: ffff88804e711400 [ 51.695743][ T6038] R13: ffff88801d320500 R14: ffff88804e710ab8 R15: dffffc0000000000 [ 51.698235][ T6038] ? __pfx_remove_proc_entry+0x10/0x10 [ 51.699956][ T6038] ? mtree_load+0x3a4/0xb50 [ 51.701400][ T6038] ? __pfx_mtree_load+0x10/0x10 [ 51.702929][ T6038] ? rcu_is_watching+0x13/0xc0 [ 51.704448][ T6038] unregister_irq_proc+0x206/0x2a0 [ 51.706052][ T6038] ? __pfx_unregister_irq_proc+0x10/0x10 [ 51.707837][ T6038] free_desc+0x89/0x330 [ 51.709156][ T6038] ? __pfx_free_desc+0x10/0x10 [ 51.710672][ T6038] ? kasan_quarantine_put+0x104/0x240 [ 51.712376][ T6038] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.714007][ T6038] ? irq_domain_free_irqs+0x400/0x5c0 [ 51.715698][ T6038] irq_free_descs+0x84/0xc0 [ 51.717155][ T6038] irq_domain_free_irqs+0x46a/0x5c0 [ 51.718791][ T6038] mp_unmap_irq+0xf8/0x130 [ 51.720206][ T6038] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 51.722146][ T6038] acpi_unregister_gsi_ioapic+0x40/0x60 [ 51.723878][ T6038] acpi_unregister_gsi+0x25/0x40 [ 51.725433][ T6038] acpi_pci_irq_disable+0x275/0x360 [ 51.727080][ T6038] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 51.728867][ T6038] pcibios_disable_device+0x89/0xb0 [ 51.730502][ T6038] do_pci_disable_device+0x9f/0x100 [ 51.732155][ T6038] ? __pfx_do_pci_disable_device+0x10/0x10 [ 51.733984][ T6038] pci_disable_device+0x130/0x270 [ 51.735573][ T6038] pci_device_remove+0xb2/0x1d0 [ 51.737110][ T6038] ? __pfx_pci_device_remove+0x10/0x10 [ 51.738818][ T6038] device_remove+0xcb/0x180 [ 51.740276][ T6038] device_release_driver_internal+0x44e/0x620 [ 51.742184][ T6038] pci_stop_bus_device+0x120/0x160 [ 51.743795][ T6038] pci_stop_and_remove_bus_device+0x58/0xa0 [ 51.745635][ T6038] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 51.747677][ T6038] remove_store+0x123/0x140 [ 51.749112][ T6038] ? __pfx_remove_store+0x10/0x10 [ 51.750681][ T6038] ? find_held_lock+0x2b/0x80 [ 51.752168][ T6038] ? sysfs_file_kobj+0xe4/0x290 [ 51.753689][ T6038] ? sysfs_file_kobj+0xe4/0x290 [ 51.755209][ T6038] ? __pfx_remove_store+0x10/0x10 [ 51.756796][ T6038] dev_attr_store+0x58/0x80 [ 51.758232][ T6038] ? __pfx_dev_attr_store+0x10/0x10 [ 51.759872][ T6038] sysfs_kf_write+0xf2/0x150 [ 51.761286][ T6038] kernfs_fop_write_iter+0x3e0/0x5f0 [ 51.762912][ T6038] ? __pfx_sysfs_kf_write+0x10/0x10 [ 51.764516][ T6038] vfs_write+0x6af/0x1050 [ 51.765839][ T6038] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 51.767683][ T6038] ? __pfx_vfs_write+0x10/0x10 [ 51.769190][ T6038] ? find_held_lock+0x2b/0x80 [ 51.770684][ T6038] ksys_write+0x12a/0x250 [ 51.772172][ T6038] ? __pfx_ksys_write+0x10/0x10 [ 51.773741][ T6038] __do_fast_syscall_32+0x13a/0x8b0 [ 51.775403][ T6038] do_fast_syscall_32+0x32/0x70 [ 51.776924][ T6038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.778904][ T6038] RIP: 0023:0xf7f95fec [ 51.780201][ T6038] Code: Unable to access opcode bytes at 0xf7f95fc2. [ 51.782251][ T6038] RSP: 002b:00000000f511450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 51.784856][ T6038] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000400 [ 51.787376][ T6038] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.789800][ T6038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.792268][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.794721][ T6038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.797151][ T6038] [ 51.798831][ T6038] Kernel Offset: disabled [ 51.800143][ T6038] Rebooting in 86400 seconds..