last executing test programs: 9.211870889s ago: executing program 3 (id=43): fsopen(&(0x7f00000000c0)='qnx6\x00', 0x1) 9.115105609s ago: executing program 3 (id=44): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1a0d01080001ffffffffff7f"], 0x1d) 9.073183739s ago: executing program 3 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r7, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r8, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$char_usb(0xffffffffffffffff, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257b90bbf0a976a73973319258ad7f738c04dfbdee4ea0e1b77a909a154fd934f791ebea03db6f06c8f14bc40924e46cbb9b343f25d63f332f9b3f176601f842a4e40401cbc62ee7803c3a2d71f3878f61d8fb8cb5ee90a696b22fb97bbdfd36af05c2e34dfb3d36cf7333ea9dc98af537780ae7bc701053b9009d654d84f04c851b311341efcec16ef3d5c8a7e8af494068dbad55bfa7b7bf4475ceb03a6f4ef11ce14652dc36f279671b7184586c7aab57d50ca23deaeeeaebc2ed024d91f399c84834e7802ad28b6ffec7ed089e8af35d15f2713e70ce55b3f60b9c002496e110c3a68e4c01faf901df4e39d007bf99f3a2d2e33c58b92b961937060a92ab6347995c09eb6a363092e3a45b68bd5e734d43b0bc98070d66c8d03490897a7d05e894da6d92c46cb1d961d11a7d1cd9d3c437c07e9f090690d2b344a93fdc5d7276b74231f1ad050024359e7a73ee913e9a7eba72f23482de94c572d07491328ca363762c44ddcdb1623ec6d639b368d407ffafbb265de19bd5e52ec86c12167dfe2a3de629af1d66612c3f313e07a301d8378fc6eb551196b51680d1194d682ff6cdbb0f811608d6321b41664108ef6dd1dfcc7df602901b0c0d549fb8d0c1aa9b542b99d76b6b8c360c9bcb01ed819a57441948465279d0b2652be1058065929bffae3e9c8923ba01c954f3c49298db8ffad96b73684daf2e608046be2ffb0de70237e044d4be3e6ccc1984ebd2f6e0f57e99fcb0ec30598f121bd93a4003e0ba0815e5ddbeba9f3f8600ef86258a5423fb1f30da5be531e573bf5322a5842eeb23107f02021dc332e0e687bd1f4f0ac09293c3638603279484dd552d534089e0b5b903c4ceeedef410662ec12e17e9b616950874e24d313d770e84b488544a8b829039d06637269367c108dc37712d46ef6601ef4e937a120c607e570446d6216366a72ced5d543ba92a929cef7c4fb03307e88174ad88381b16de1c3f9985f483ff75e9b40fc0e001d037dda41df9a583009baa3b246c19ab5a20cb4e62accb7a86090717c17db68b0d14905ed0ce6e49555de65448782fc0899f631393b5ccd65da59265d1b4ba9ff4d8a328cb42d2e3a465db23cfa9f159ce5716df7ccf393a561a1783679048570f2467c5336106bc8954569c047e854b2211141d169b27ca796b42c544f70123bd9f6ae23f87d1be164cd7bb2da3dc79e6f12a687296942c9c8f2d99b6961b48e046028bd69dcda162510ad235b7bf28a0ff994e23f08e807437dcd1a426a31e818b918e5c28725bf12f42d6f719d9d81100e529b9f7e4891167aef44ec7afa086e46cf832d144ebe668dbafcbf229be799f33df6c1fb3365f4cb64f360fb70ee140818503a185a44f15d3db5fd5abe8ea3c59f4120c23d3792a4ac791959858dc88286e403ad45b31716e28be7684375c2651f88ed78c2948d673ef2a8a937136ca9842717585894453a83280edc21f3fadb974c36696fe7d8bd136a005a69d14d034a869c4035282ac7c91642a05743814b4cd57df50a4eb15dd7a561637ea4ef6b3bcf89695f125fcd390746357917a6bcf55e0268a09ae5b1195f99a7fe5fec2d4115978052e195d7b5df345b827121a86166c9095e387301fc561654db0183715239247eb9dc15e83c20389aa6271b42125bd475b82db032150aa39fab06fde1034347a8a884c74edb21be34c8cf5b437ad7223970defbb27ca8eb0029fdd4acd4bc92236584ed42f03706376c583a5c8e5cf9f2415ee1f8c1b01f34d7cf1b673db2158eb99d55878ee41b391f8d7339c6f3471ae4af25e5ecb8cea2fbed9f915ce483f1a9411ca5b21776295aa4f52fa31d875f9850f3e07b8093b0f92570d41d77e68e9a79a27b6f5a2c9a100cde02ea745353e996b99b43e0f1aa51288d863859bc618a602c17a15e285e6c189a21a4762b57ce396c852a5453f035c7a2d849a98c30a2e7f797ed13ffae44e4d15a240d092a25b4820e0d2fe3b9cb74b89efc977634d1f37eddc1433f6b06fd13c543bceca1254f91413d8b914bd67f1dca660ad8ef561dfb2ce5f0486b3e1a19a3682dad8a727177a1ea448273c3cd308300e3b4fc4f96efa8d6d723de8b38f7688e13c47b2aa801ba5c33a138208412524250e41eb253520f68324dbdb5e7de6e02dc315e20cf1844cc7a5f15428dd342bcf40895d94b3de0e1acdb698a94e0dd881edfb7569d0c81981213e7186eac0d80dd35e1a48aa5319678db523e9cea10163e3924c52d1d4ff589b3b228d98e64e6ee22990600ac9b272b483520148dac0e26d27ef618c86b0a49075f71d8c21e49bbcf83eb1374f0ad393074e32fa33a257f13fb187ba40b02ee6e688092e81ce0c04e3e53507b4b244fcf3afd4dbf05747a8c81828351558223a7bd0ff6684e94cd264ab3841cca4983c10b627c3c13286872798a3bce148b7f9847cb2b485bb900ad006b08482c801e9f05e5e57591e9c9ed1235c397ebffec2bffdf0eaa4aa2b3927e583f913edb95ce47603bc725ad16c59c4b638668190bd1f9c4b2c9e1b14a85d9e3e81ef3668baf27e59dd14d1ade2d7873d4feb989cdac04675f40b59a1a41453b44e0fdb89f4a7f3f52cb3a6a79d0763f85826fe1b5acb3215a0328c32ccdf2c21bb4ab3310c2d33f9b1255582e0807492ce59953f6cd4422bfa5ea9192177bbf13bd7a83807362036708653bd01b67d3def4ef7041ea29995404c0b10b0eae74bbf614652f887f755e94d390341437d50cecbf2c16fa21638ad3f85f30db17e1af9bf2b4aa8113d6a9170dc4c024f484200a471e9c73f6d2055585bdb499156081d3bc288a2ddd2b9d856c69c22ad3b4ee16555c64d86b7a9d83722860fdbf06b3a1592f3e5832fdf2d3ee078e54b7cee981cec96de0a4c77e052d2f86061cba468f6c5861771014dd56320f5fd4f84b5a890838e9fe72f41620d131cfdb7d0e627dd490acab383d5fc8cfc95e966ced3dfe3d315ad76a0452a50e8b4e9882ca9294eaa12f73629affc9050df48aedc1da6081259226056012decf4a60c3e252860cc7452e6058d8029d2d0971496e19cc94558c96678bd1b074894271b2bff2810f8a684c9329c584641bfeeb2fd4db920aec9d18e1b05803c37bc1b3cd1b3782a713ea754b1a35f137e21e31afd230aa1ba53cbc0af2ec98c860c993441007f910b8814e115725753f7a05d0b0b290048dd6aa97f3ae6f14b9652db8017e23303a3aa52c9fd5b83aa3f8ecb5e280425709237cd6fc6728664168bb2dda083ceab3ca528a78432104912e96a2ff9057885b1aebf1a8423b5c390f32bc5f3f0093870a27d8eee3576aa70a9b1ee21041a64e7dc0bbac8b46e7aa6a825bddeeab7ffbdad2ffa238a6cc77532551ebe4e650faadf67328371563e17b508ace6ed5dfcec60cd4b90ca23260f8ae78d937b7503f9595f233c7b719b837484bb684b2f9ca4df4d716a7de9ceadf0212e7f24574f1f14015ffb583c9ad2747cbddf2f0903d3dfc60eb204c6b581ba9caba16471d1bfb09b8b96ddadadcc97435ad6fe5ed249e25b01e0d5af5fe0430e4fb18eefce981fa6c78abab2a35f186137f256d8719f2053316680c03e7499941efd68a0ff066519f4d02608c320228c8cdc42fde4abecefde9d2113f730529e0215f284732d267c6804a49778a4ee32fb860122b4584a519ced4dfc0c8a3d25d90142d16e9e36eff436881dbddd06b99dee8c4e2ff7dbc19edaa7e1ad5b1f9d713abd72d4e4547b3a46ab6acfaa7d92b6da52b75bd530f6d833d156b95f1da248219c85fe807af0a47ae22c20392c889f5e89a3524cf42412a70277fe98196deb7a4c2b136fba8cc411afa84ab762d9b95b284d95f9220b3789ab54dcfa21cd2b99fcd501263cf23654c332a3aa37c6dac0c9c54e5602a691192707708e53abea4c63b7943b1348d3cf0bdce7e4076e3a4ed9afe8651cd8e953e30104534dcb6e85ab77773b60be7e46f6cd07ea8fc675d27593223dadb9cba83f3976e5133d79afd6e4a83877bd8f0d56bd99f3d996df0295838ffb421781da6c088f18f1f94e149659f02f01b99c73de89826f65bd3dbb44468518e0f0dd5fca324d3c9864d192040cd067b54b8801610bf8391ded4df50968bf7a0d0c0f7c56f47da904ad9bcc52e8690a844b7b0be9a4e7bc8ae396382ad4f6910df9eee9f19cacd9fb0aa9a378ee8b2e58befcd7158d1ea6cdc73cc63233d8c09fb4a04e7e672d7d0c7187f7b027e87560649eb8dfe97c81f3dea408f7f9c171e38892f077e9423e91b55a4635ddbea7b535d31c8ab28ae5030f04356bf05c737884a351a8da8ae81535ed5e9628befc767cd431907dd388c00b9a8d8ebf5b57017f70830dac5eb2872b77da544742d2c93940a94ad88d094090be124e254a1973d8197fe5ed060e387e14680ea92e9a93799e64aca69ded0219486df2541b9fa209923c8d0f57978a39eba4fd17e9108243101d441cfe2c0374aaa65c434cea22e5d103588d526fc92531249ff8b8cd4783d8b915584c5ac71ff330797c85d5f66510a403cf996bec00239cef1730a35c1138b8f7f63f14e253e4d91999632d80f23076f7af79a38388e935e198d666efe799a4b8c2d82e443f01ea4907183d3bc9fb5bb94e119b1fb34beaaf1c0d296c4898600f99488a243c00309ee68a3c7297f3851ca8226eb72103d3e9981ab2dbc7dce584795aa452ee7950508f6016f04c965309f381edb1ce91059c3c21e0f7adf67f966d690545fb9597529fd5885937c433c5a156867951fc419f92ad55795a4267b0c66b59ba22ba782f92d431e37748aa41949a954b3c68120ddac938788b6d753d9152a562f8bf972c744359def08a16da4c077df2795710397e70faa3fe8e004ccf7275ad42d518094821207ad6813f66bf5c15e1a61298b3f977d7fd783f7cac82e88b652a14b9f6df36425cf89507428a6594d2200f392faea2542e6e51faa934ec1218652afd32c1f09ba277f8f", 0xe9c) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000c00000000000000fd4100", @ANYRES16=r10, @ANYBLOB="00032cbd7000fbdbdf251700000004000780"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x2044010) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffe, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r9, 0xc0605345, &(0x7f0000000080)={0x0, 0x1, {0x2, 0x3, 0x5, 0x1}, 0x7f}) r11 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4c20, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x67}, {0x0, 0x5, 0x3, 0x0, 0x0, 0xf42, 0x5, 0x6}, {0x0, 0x0, 0x4, 0x5}, 0x1, 0x0, 0x0, 0x1, 0x6, 0x1}, {{@in=@empty, 0x6, 0x33}, 0xa, @in6=@empty, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000004, 0xfffffffd}}, 0xe4) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) 8.715791355s ago: executing program 0 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x3c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0x80044dfe, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$getregset(0x4204, r10, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=r10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r2, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 8.247011647s ago: executing program 0 (id=52): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') syz_usb_disconnect(0xffffffffffffffff) preadv(r2, &(0x7f0000002c80)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x1, 0x6, 0x2f00) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xfb, 0x106, 0x1, 0x1, "1d00000c00", "0902935665a27c78c8d23d45f15c43cf03be7c3f9e5c1c9a108f3cfe97bdceba6eb860837cf964f1a40a0dfe429918a3c16e713966aef513ac9a2d7a804f79f99baa4e2de682cd3471308f680bba63ae00cd6eb7286d50bb0dcc5635983202a01ed1945cd59d70f9f1cea6ff6e9c1402093af700fe3871ad38f5c5f8df90974e54ec83f85730dbdcfb9c070816b79f030fe9801b492d19e69f5ad153977e9e549980b982fca4c898545f1433b1f69a09e5dfede50754ce31d40d4038caa306ee486f4f651edfff757fc3124b573a316c8183de6194ffde82251403cd85689ba3447ee3c5615f0b7f882e5e2fdf6060f84e"}, 0x106, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x79) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f00000003c0)=@abs={0x1}, 0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 6.277403015s ago: executing program 3 (id=55): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xc, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r2, 0x0, &(0x7f00000004c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x4, 0xfe9, 0x1, 0x7, 0x2, 0x7, 0x9, 0x48, 0xa99, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d0530000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) syz_80211_inject_frame(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="50000000080211000001080211000000505050505050"], 0x36) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x850) fcntl$setown(r0, 0x8, 0x0) 6.252291389s ago: executing program 0 (id=56): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x8810) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x108, 0x1, &(0x7f00000001c0)="17c20000000040000000000000000000", 0x10) r5 = userfaultfd(0x801) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xb}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockname$l2tp(r8, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) 6.022922066s ago: executing program 2 (id=57): openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r3, &(0x7f0000001b40)={0x2020}, 0x205c) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xa) fchdir(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r6, 0x2007ffb) close(r6) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x68, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x68}}, 0x0) fcntl$setsig(r7, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 5.576374124s ago: executing program 1 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x980, 0x0) close(r1) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) sendmsg$inet6(r2, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e24, 0x906, @loopback, 0x27}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)}], 0x1}, 0x40085) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="c61b", 0x2}], 0x1}}], 0x1, 0x4400c800) close(r5) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000040)={0x0, 0x4, 0xf2d3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000840000e861d4672061f8c78f290000000e000002", @ANYRES32=r9], 0x1c, 0x2400e044}, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000280)={r9, 0x4, 0x30}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r9, 0x8f}, 0x8) writev(r3, 0x0, 0x0) 4.737635229s ago: executing program 0 (id=59): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/227, 0xb5}], 0x1, 0x1bf, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$getflags(r2, 0x401) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) mmap$binder(&(0x7f0000465000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x1da02e131d73eeda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 4.64681859s ago: executing program 2 (id=60): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="19006a7000000400000004000001020000000800ba66c531ce022a35a9a913fc0b736f5f2df3579c5ae6c134d5e92f6a5a9e3536bdd09767a26a7ac15c3c6159e0ca49cdff061f989a7b27c5e30f650fc9e1040dbd8986ae2d4a79582cbbaa97b1645d7343f7c73e15d8d9cd5c1a24ec81e91bbdf9d77b2ca4001efd8d6409283f27042530a9c6a6f642e803ca778f5c82e6", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x1}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000001700)=[{&(0x7f0000000500)="31626202383803c884b5f45703bec88cec7e11f811c2999c7de5a389f7a81681754cec80d498cce0b4bf01c10b7b66b5b61aee6625e70019b73bdde6a4c98e21e7dc602b18", 0x45}, {&(0x7f0000000580)="026acf036342c02b28ea52ad4326d02e80824c2160d926931c1722837defc08da1d3d5bab482eb385c29ca4d24e4f07f6ebc6f39aa1b81376cb0e0735c55485aed3763db190bafb51553cb1b0d7b144295dea8cf9c5a9b657135b86d798edc38fbb0f01619b4169ccfd9f180a3b309f2f3f799c4b4e751166421addb1ad3c9a8fc857a9e7dcfb2bc018c71da468486abc97dacd0", 0x94}, {&(0x7f0000000640)="06ea298240abbe277336e0eed96e072d", 0x10}, {&(0x7f0000000680)="d7e94c6e36939c6f59bf1597125e0984363178f4437f095d9d254ef5725eed92797606c89e8a7939a10a7d3c6c9d1caf3ede2aa21d30bae858576961d01adb264a09c131a6659be3b6", 0x49}, {&(0x7f0000000700)="4f960cf00c0cd454a04c3841a0d1bbd5c8b024ff0848bc0aa89f0ad22a48d6cf144d7eae9fd923c0e8c9401806c9833e863990fb327f92a6f6f5bb505ae6ffe6dee475e10111c346634496f0a9beedfbd337e87f4db32380fd377824b6f4c2099c8915ae62179cd16aad919148a6db2e19a94c32166ac806f15853e47e1fc91ffa768e8ad55a1a9ba69f719d44497af1f944b6c949d4b0e3c84da26d70445a36fbadde25f08643d22b362bc876b3c83aae92833cb5829d826b6074ac9dce10b5b350e58ba27ff14cd587e0b4d64132432352e3bd3d028159462b0369da64281a6f3aeb3052911fe4fc27968cf8f6717bcca29db447db21e1a39d75e03ccc68df56256b0251878b913c5088ec67f007b6d281bd9f9d5c9561000af1957332a7cc1afa1387014181c0d32c55ff292e079f5c00cc8fa7b19cbd5d66afe3a2fd7299bffc867c7b07175f86aab5bc126661669b95ff634827f9c45f1b7f74d74d877b1dba1348ab65fe8814ffa2482719368234c474685ca63e6c00eb2fddb3a98002c136c06eb694598894932c289e32a2b45757a058d8f93e0a1b155be1d6ef64fb2866f5973da629f83db6850548895009ec1001aa40fe015815c015d497120e649f20c73caa2f107aba661064c3b7822751822ad70c4632fa3fc87e79798a2984598774919858d64a0242b17d075733dbd671c75c0a9816a590c5a4425cadee8282b6cc20f5f2994855d97d63b9aad3965f6f6f42eb9df5c225d8c0e2ac7c881a14db05f4d11650d8e10a678fbac1271a2b088c8cfd080a204a4c65f709a66a733c78b00a6dd253b9ee174e073b0c5f42b49b23d0863d38bec4218e6b1a1559b1fca8850b701c7b9911975c1f459222502c41ba1c916770a7281fd2cc91fee94bd0b373134180672736400436a737e7073c5131f3ee483b4f7e4fe4860e9e188199cd39a16a9b40a24eb205049fc3ea383310e5424a60262630b6da3bf90b93ec9301bf63c1ddcf6c05a6525e7a7340270eeb53dea6733602d20e4b8e848dd67d9edf0dff3226e1d99ab065c2c2f47b22c90f51bd65493b9e98a4b021c2628e2f88b596b7e24e6b42dcbc8d1bf625e89d1406f382a2927505a9c9861b31ca6087e744fb12c1ddeacb49058d9623dec0ab6cf89943f7536f9703e47342f4e3dc96541638df1e1ced0647e0d85dee7b223616da2df7e58eb4f65763f88bd3a4ecb5681f9d745711ce740e4c0ef55c22cc2c32ba472368057e7ca4032cd052ec5f3d4a3fc9bc5d132743d37d1efcfb989d464b9c421bc4de3dc48de523a6341ad0a703c2ceadfa05a8c1fa340bf6ed7004b416983081c963609fbdcd26dd52263f07f2465990a749e83b26d2ff0255308dc8b107691b0a0049cf5835840607fa75015dcf5a097200fccb95fe37eac126422dd43e38e5f97030fdeef6913cb227efa488bea78f648f4278541ea9f9ab126b7a408a5fd7b6e4a68002f190252d058a88bddc429db2b30d306cb92e4ad2b3f1b10a111c0758f4d72a94c77f06214d631933e089319bcd9d71dab5627a9928beb2081c72427834c27eccec23350bdcfda4ede3fa22ea7fd70ad0d4c7b236a73a4b24d76289114dd3f34dce2fba72e43ce00837af1939b9dd5f860c93e79179078a45d7ccc7c467347190397528a3650cd9befca6b0ed18972cdbdced5fb3935d8542269254ea33c36ce388a0260c4621015c9ba4a19d44fd71361aed6c7075766c49ac62eaf717f0115af99f90003f7b5d7b241bab9b7127800f5c6b2c3dee01b2538fc24852ad4f7b1a79854688daa7dbfa0de0a28139137eaff4fb30009c5f23b46e01f1ef8bb6722f2f5aa2043efeff7bffee21b48551ab27554f0b986e2d987410bae910e8b5df3fb748b2d7a830909117104e2d3acd72daf98a42fa9d6f2d29859eef7bd66c36168ad624dc275747679ed35591e3779f3a59071a5bf47912abe0659db55f8580d357f0f87c962e21901fea2466fc181df9da6552993290a9d8a17ba66ca950e143f94e87ca6e105ca07db6eae3b26e7c52699763a4c69c23b4ebf38c3fa20fee8fd468c0039f49c5a4df9ae966b9a7d2b9f27dfc49d97254bca4bf0ca61cc1a17563ea3f59cfb2c1ac1368c0fe1f5ac48f79f69a299d85c7fabd40e089d935b46533039f470e950574213dbd4efa6f4aaf267072b68d8ebe742b8ea906e1d8d14cd5d14d5740a451690efea83bd8c6dd452e31b0d29207b007e51bf821fe55a9e1ab5b56060e708b67ce1a2ce90db34ade76a109d91ad605cecafd09bf5e37bc686c363c69ea41f8ebd014037fbd4fc155bf83823648a297d1c6768a3937647a91cb7f351fe57c36eeed7d1750c290f13a02a1c2ac6e483832ac2742183e26ace479e186a0fd4cc48a62d216740a1b2a96a574e8af8920187813c02e1fa6303a68769ea33fa26b8906ae0edd0c16acdfc356869e673dea6e9d0768ac373aacf4a1e8acf0e186b97a8c6bbdf8c5847b47ad084b7cb9605af79878da2d283391ebfe04a19900367744c3a06d2df9210511915292b633a493d82c067627f0126753d24f4d7cb9d88eea5a19cc2cee03530feb394241c3ceaceefeccf9f6c02ce921d6e4bf31ef4ef082d52291b769497e65054cd8994508c0c31a2a176cda3988cec364bc2ae481f6d113ae6d7e42d2dde6b0639d36d9c80df666ecc2048e352f7ff1b06288c135481e96bfe82a0f8ae38bcfe0d717a34c7ef047a8d78e0006a2cfa982b4796bdcfed95043fa557ce6b001a66fbbdb23102a764929524eede14131b56dca500f07d088b74c68511196456b947090fa97b9b4166a6b4cc33c91977f37b34f0335965f7a8e882bcea94f57a6cf063b4622712f921c071229a21666bf40fb9016eac9bcfa744e63bde096afe3549667455f9d592b30b62dadd0081095e5f91395557c6a38b7c7f0dde197e52045504c96562c2d4a8e19267348afa5c873d6789b11758f5801678cf7151af0789acd7fe9cf7515ea4015031b909efee49809ec1fa7db0e34e557e76667498337f534d673b7723f6afda15773601ba329bc81b1f4767e1a77046595fedd551275ae2260351ac8e54f04b2b70a296534c4372b37dd2513d7e6bf61d5c19bb45080454b8c8e9341e2cda34d4cb9b3b4a2186ddcac24c6650815475e2cd10b3da296f138ef0099b29ea14f2dd6a2887610d63713a5b0e013f0a204e7839d86cd83d181d876fb717ece9127b5ca440dd0fc3c1fb08ddb436f35b9f5ee1d8633bd41fc65b4e3409f0be2340e357c836410d1185af239a6e8cb275fda3e9439c37ce8d4ec6b987bd33fea083f207427188d8c8608f2402d1c0fa7b9b64b11ecf7c4f652d1be5232fb6b6d27d1dc95b42aa605ef7d3b667f1f46b9d88bae43fc3d96b08f362bbf1fc33ab33a3b5c7fd778ce9d558742b1904c465d9a84cace4577b32b8f63fec374c2226c1943fd5b552ac776e9596d5450830a4aba7295692153a8ca39110fc47de6e6d7f210d6ceaffa248314e40276700f8a13f57b10cb8f8c919b537c0b1385edd45b6f020963bb073bbc934653c1b036e1d035613758e62c6c01e0b70e2b48fd5e03374bdb7683a3289c2d543652e1d870581fd5210a472abdd1a2acda8cb1eb6de57fe2483d0a6774eef6692f05f3476f949a8077868e19aa7c6688eaedd1609ce191cb2702d1ca5afc1f883b6fcd1132ba78906aef1d7770345b8d4338639e4ca2c3c0c875b3025d83374e61d43dfbb766e275349a754ada8a5a85e481c61d7872e98eb85b13044d2b95894ac1149c2e726b022b3a606f5eeee2a6d3d907bd7991ebb3aa3d17f51c7c9e65dc99d5ea527b6e81cff571701a4010b6d85623c598f48bd075b0f9c0528c6342fd2e6c58f41abd4af73d35f97e5b7848bb762de34ff51197d3842cab2fba57d42e008903084b60d59808401019b06ab6a788db781c30d4e81841824b6031380befec515cd544c399209c1238f4a9e178e0c5e623bb3dfb6c21dbbefccdd63f7f58ff5216f4832cdd0f1948470a0be02f59309ea5e611e3c856190f042a80b47a2d9bcde4503fe5794ec4889e4e2c7df8fe37e04ce0c4e12e5baefcee73ad530c1b1e7cd2d40697b2de4ea871445ae9eb32a17449deec7517f2b7fe861cf2e44cbe8b6a9144d84c2722f11f8fec22180121c594548736b28b765352eefce4f6d4e600f61664334737c59635dceb6f4d5cb80e954057794c4a16832018760abd4c1d58756a7e7080391372ed8f70e2c38e021df2a70b2e5619c9cfb60396d4e3bbfa4cc27340e979db6619fbdfd6bf1e5698a3c3ac70218f5d30ed320886020ad80af80ce6c3d7a369513a952a159a4247d06cd23734c8559967d09736bb098ee4ee51d57036b0b90c38b1674f9720534a92deed277264863640ca2184049e5233f0096780761c721b203c457b060b38c3a576992ce8878ac1f0d267b13a7b80b44ae01051a4ff990339a2d9b9c016592e98cc0aeab753e9dfefe9b61c603ac418f125e8e4dd796cec9d81d1a803827acf3a8feb0673d6a3742af3bc7a8b0cab5470efd7c60e00c71c7b94cbc32258723a0d499f43b928f30fac7999935f22bdae31f60a4ca739ef80e58bcefaa3d08fa1cee375eedc68ff389426773bbb066b0d4f16ba201a763082542a3f14f2797ab69401093c042c9d23187d0e185c7424faf06d8d1527dfa35e53a25d4d4896b9e22e2dbda4db4ea7191a4bfae7b779dd40763dc4c751f1124dd69dca159233524a5a1c34246548488d91645c970aeff5814b1ce2f572d2391e3e81da3a346e54f9bccc8283b14b048b5da388a6ac3e1727b0f6d36e71ab20ab5e020a5c5a1cf460793103cb8fa06cbadef79ea690ff95b22eebe3fe6de331f8f93831c128406a1d498fcbcff5c141c305ac86fc29b7fca86b07743b45584ff238b2910aa60904a98b513bb78bf02e22ca77823e7076648d598a1b734951dad25e55eadded490ef050a53fe9381c50e238e312ebec871d4e2d3875b9c729902229b3b6645ed3088cd3e46b4157cc02a7d5a7183cf9e84e60b78b186e6f4c6362ba4d59f987a9d1dd0985aee58e742ab9e273bbd45706e2d63ba4983c155b87ba8b08da6bca7b07df5e68e4d0f5a80bdc1c8da060ea75ee4c961c90750edf23aea68d44335628458e240ec8531702306a0c7089603d3e475ef1c8b2455a54b455c5f3ce9d40ef86e793822d0736c645887bf539c665e900e2b24fa23a7b49ada46c464736c7e34a27901b125662f41972c31abc355f7a735a27b01042eb68dc62ff4b288c07617aa21f04335dc2d01a3fc5a063cc8526be4f899ba3dfb624f367c5a3314254caa5fd5a6374d2c63231cabb15724a18b261ff15398a1c62a509ee63098b156e675757dd183ee98f6b9dba16e52d41700927787baaab79411ee87d3ba06a3b946b235baa56ced196635b10db54e1b91c455803d313d2561e7df40f45b16d5ea4e6a8b0bab09374a414931ce103449671358957f61889fe47262a5f065ca192d9642c834da05995a1ab023b2cb4a5a0a77b2336fcb223f032ba60830c6abdd2f6f621758caf6c8d94026dcfa0c0da85171e2ffc2458497ff949131c25450bccf9b7335affe7740782c3d63e09c9dd5125bd649543731185299c1357f49d55f1a4b3733027a933c18deff33a0587f1d5cb1e882a98f372a508e37b7842d0fcbee8798738808d67327f23dfd25f644ac142e97cd4e83e62e2b5f82b2b02ecd69a8a82cfab8fe1087fdea3680e9bea06b5cc6b10c25e52538441df5d", 0x1000}], 0x5) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000bcfec400000000000000009de3490d58a4"], 0x50) userfaultfd(0x80001) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.199458443s ago: executing program 3 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x10000, 0xcf) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) syz_open_procfs(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11e05, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000aa004500fde10000000000119078ffffffff0000000007004e22fdcd9078c000000080000000609a49ad"], 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETS(r6, 0x40384708, &(0x7f0000000040)={0x4, 0x1, 0xe, 0x5, 0x11, "3e0000000100"}) chroot(0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) 3.913421703s ago: executing program 2 (id=62): r0 = socket$alg(0x26, 0x5, 0x0) fcntl$getown(r0, 0x9) socket$igmp(0x2, 0x3, 0x2) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0200000000000000000005001b4f"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000df05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000080) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x0, 0xb}, {0xd, 0x4145317d25122f6f}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40864}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x7fffffff, 0x0) 3.098038084s ago: executing program 0 (id=63): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4004000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setregid(0xee00, 0x0) r3 = syz_clone(0x60022480, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0) prlimit64(r3, 0x2, 0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086603, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) setresuid(r0, 0x0, 0xee01) 3.020598497s ago: executing program 3 (id=64): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f00000001c0)) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf251014"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) ptrace$peekuser(0x3, r6, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x5514, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0xd, 0x1, 0x2, 0x1, 0x1, 0x0}) prlimit64(r8, 0x9, &(0x7f0000000080)={0x335, 0x1}, 0x0) 2.914531948s ago: executing program 1 (id=65): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x220000, 0x72) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r3}, 0x0) close(r3) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x13) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x4}, &(0x7f0000000380)=0x8) r9 = pidfd_getfd(r8, r8, 0x0) name_to_handle_at(r9, &(0x7f0000000040)='./file7/file0/file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="14000018dfa258741cf8671c351b00000000000000000700000008000000ffffff7f09000000"], 0x0, 0x1000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 2.88722927s ago: executing program 1 (id=66): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 2.877708962s ago: executing program 2 (id=67): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x3f, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000e44000/0x3000)=nil, 0x3000, 0x0, 0x42031, r1, 0x100000000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@private2, 0x29}) shmctl$IPC_RMID(r7, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r9, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r10, 0x4c80, 0xffffffffffffffb6) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)='.', 0x1}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.822214372s ago: executing program 2 (id=68): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000180000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={0x7e4, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x7b4, 0x8, 0x0, 0x1, [{0x490, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x468, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x6}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2d4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7e4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x39011, 0x0) 1.820509208s ago: executing program 1 (id=76): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000040)=',}#})$\x00', 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0xd7, 0x8, 0x8, 0x8000000000000001}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0xd0, &(0x7f0000000180)=""/208}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000fffbff1269000000000000008500020050000000850000e44f000f76824c000000000000"], &(0x7f0000000680)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000440)={r2, 0xfffffc00, 0x1, r2}) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffe4, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x2}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x8044) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r7, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000) 1.548672163s ago: executing program 0 (id=69): openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r3, &(0x7f0000001b40)={0x2020}, 0x205c) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xa) fchdir(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r6, 0x2007ffb) close(r6) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x68, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x7}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x68}}, 0x0) fcntl$setsig(r7, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 853.09196ms ago: executing program 1 (id=70): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000804) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x6, 0xd, 0x2, "134604cea4ddbc584c17bc6d572190f50700ddebff61ff00", 0x32344d59}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="0901040000c000001c00128009000100626f6e64001e00000c0002800500010001000000a88465f7cec85375cffe3c3a489b24bafe4e00fc7c09"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000001) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a8018000580140006"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r16 = socket$netlink(0x10, 0x3, 0x0) writev(r16, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc04c5609, &(0x7f00000000c0)=@overlay={0xfffffe00, 0x1, 0x4, 0x70000, 0x2, {r13, r14/1000+10000}, {0x5, 0x8, 0xc, 0x4, 0x1, 0x6, "72c8a78a"}, 0x8, 0x3, {}, 0x4ed1, 0x0, r15}) 582.450057ms ago: executing program 1 (id=71): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100fce377576dbc4414a90ab8eabccfbae90bbf164548343e4358489eb757c92073182da304b7a4854579f095813929dfab79b8db0131df9e0349e914a8a86a4e9dfa2a4c0d3da7722154be6477d61c8ec2882988fc44d7d21a6cbd4c0ea5de21e6e893c139"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(0x0, 0x13b) socket$inet6(0xa, 0x80001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='2', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r7, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000940)='dummy_udc.0', 0xb) 0s ago: executing program 2 (id=72): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) request_key(&(0x7f0000000280)='big_key\x00', 0x0, 0x0, 0xffffffffffffffff) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) syz_open_dev$tty20(0xc, 0x4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:28854' (ED25519) to the list of known hosts. [ 42.431471][ T5677] cgroup: Unknown subsys name 'net' [ 42.617524][ T5677] cgroup: Unknown subsys name 'cpuset' [ 42.623018][ T5677] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.578222][ T5677] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.238448][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.244307][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.250439][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.252931][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.254755][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.256236][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.257917][ T5756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.258610][ T5756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.260246][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.260358][ T5756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.261404][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.261914][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.262486][ T5755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.263412][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.264065][ T5755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.264920][ T5756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.268069][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.268590][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.269118][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.300263][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.892551][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.899367][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.902606][ T5741] bridge_slave_0: entered allmulticast mode [ 48.906625][ T5741] bridge_slave_0: entered promiscuous mode [ 48.917253][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.919556][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.921894][ T5741] bridge_slave_1: entered allmulticast mode [ 48.925000][ T5741] bridge_slave_1: entered promiscuous mode [ 48.957792][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.960092][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.962299][ T5739] bridge_slave_0: entered allmulticast mode [ 48.965093][ T5739] bridge_slave_0: entered promiscuous mode [ 48.969395][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.971620][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.974018][ T5739] bridge_slave_1: entered allmulticast mode [ 48.976544][ T5739] bridge_slave_1: entered promiscuous mode [ 49.026296][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.059953][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.065166][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.093174][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.157316][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.160447][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.163571][ T5740] bridge_slave_0: entered allmulticast mode [ 49.166985][ T5740] bridge_slave_0: entered promiscuous mode [ 49.172368][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.175370][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.178315][ T5740] bridge_slave_1: entered allmulticast mode [ 49.182203][ T5740] bridge_slave_1: entered promiscuous mode [ 49.191994][ T5741] team0: Port device team_slave_0 added [ 49.195628][ T5739] team0: Port device team_slave_0 added [ 49.204498][ T5739] team0: Port device team_slave_1 added [ 49.206401][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.208850][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.211901][ T5752] bridge_slave_0: entered allmulticast mode [ 49.216257][ T5752] bridge_slave_0: entered promiscuous mode [ 49.221409][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.224311][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.227166][ T5752] bridge_slave_1: entered allmulticast mode [ 49.229919][ T5752] bridge_slave_1: entered promiscuous mode [ 49.233441][ T5741] team0: Port device team_slave_1 added [ 49.285161][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.289604][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.292550][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.303235][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.320363][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.323460][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.333893][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.340724][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.343849][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.354428][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.359947][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.363678][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.366351][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.376052][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.380653][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.385020][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.466686][ T5740] team0: Port device team_slave_0 added [ 49.470178][ T5752] team0: Port device team_slave_0 added [ 49.477283][ T5741] hsr_slave_0: entered promiscuous mode [ 49.480345][ T5741] hsr_slave_1: entered promiscuous mode [ 49.485837][ T5739] hsr_slave_0: entered promiscuous mode [ 49.488031][ T5739] hsr_slave_1: entered promiscuous mode [ 49.490067][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 49.491814][ T5739] Cannot create hsr debugfs directory [ 49.495615][ T5740] team0: Port device team_slave_1 added [ 49.499263][ T5752] team0: Port device team_slave_1 added [ 49.533618][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.536576][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.547033][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.559706][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.562694][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.573289][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.615552][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.617748][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.625783][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.663703][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.666525][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.676418][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.700640][ T5740] hsr_slave_0: entered promiscuous mode [ 49.704022][ T5740] hsr_slave_1: entered promiscuous mode [ 49.707130][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 49.709567][ T5740] Cannot create hsr debugfs directory [ 49.822362][ T5752] hsr_slave_0: entered promiscuous mode [ 49.825700][ T5752] hsr_slave_1: entered promiscuous mode [ 49.828220][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 49.830451][ T5752] Cannot create hsr debugfs directory [ 49.972156][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.979954][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.986296][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.991874][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.995588][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.001640][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.007977][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.013192][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.103951][ T5739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.111369][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.115839][ T5739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.122743][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.128124][ T5739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.135140][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.137841][ T5739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.145094][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.226942][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.233508][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.237950][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.244290][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.256265][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.262487][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.267217][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.272588][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.304393][ T5746] Bluetooth: hci1: command tx timeout [ 50.304399][ T64] Bluetooth: hci0: command tx timeout [ 50.304406][ T5101] Bluetooth: hci2: command tx timeout [ 50.316967][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.359531][ T5752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.366516][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.373332][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.379895][ T5752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.384685][ T5746] Bluetooth: hci3: command tx timeout [ 50.389508][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.398533][ T5752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.406250][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.409926][ T5752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.415980][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.421879][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.424583][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.437984][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.440369][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.504451][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.541330][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.557872][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.576703][ T231] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.579676][ T231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.594278][ T231] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.597257][ T231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.608084][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.622720][ T231] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.625460][ T231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.644481][ T231] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.647085][ T231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.682297][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.708565][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.726320][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.728652][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.744450][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.747337][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.998791][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.012045][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.062731][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.070829][ T5741] veth0_vlan: entered promiscuous mode [ 51.084642][ T5741] veth1_vlan: entered promiscuous mode [ 51.105329][ T5739] veth0_vlan: entered promiscuous mode [ 51.122089][ T5739] veth1_vlan: entered promiscuous mode [ 51.137717][ T5741] veth0_macvtap: entered promiscuous mode [ 51.141994][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.157546][ T5741] veth1_macvtap: entered promiscuous mode [ 51.165568][ T5740] veth0_vlan: entered promiscuous mode [ 51.180536][ T5740] veth1_vlan: entered promiscuous mode [ 51.190606][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.197810][ T5739] veth0_macvtap: entered promiscuous mode [ 51.204897][ T5739] veth1_macvtap: entered promiscuous mode [ 51.220028][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.238728][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.242954][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.254486][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.260491][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.275906][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.301123][ T5740] veth0_macvtap: entered promiscuous mode [ 51.307505][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.311258][ T5752] veth0_vlan: entered promiscuous mode [ 51.325291][ T5740] veth1_macvtap: entered promiscuous mode [ 51.333996][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.338030][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.345013][ T5752] veth1_vlan: entered promiscuous mode [ 51.351592][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.354963][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.381891][ T231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.386203][ T231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.395913][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.418935][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.442043][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.446219][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.449110][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.458431][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.461990][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.462054][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.465864][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.465913][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.514895][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.515352][ T5752] veth0_macvtap: entered promiscuous mode [ 51.524757][ T5752] veth1_macvtap: entered promiscuous mode [ 51.529915][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.532414][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.539390][ T5741] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.546677][ T5741] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.551937][ T231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.552051][ T5741] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.555151][ T231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.568294][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.570824][ T5741] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.586804][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.602238][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.606885][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.613779][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.624710][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.629931][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.631747][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.738725][ T231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.753475][ T231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.065588][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.069030][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.372698][ T5908] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 52.374760][ T5908] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 52.379832][ T5908] vhci_hcd vhci_hcd.0: Device attached [ 52.403441][ T5746] Bluetooth: hci2: command tx timeout [ 52.407064][ T5101] Bluetooth: hci0: command tx timeout [ 52.409729][ T64] Bluetooth: hci1: command tx timeout [ 52.473325][ T5750] Bluetooth: hci3: command tx timeout [ 52.673825][ T40] usb 42-1: SetAddress Request (2) to port 0 [ 52.678506][ T40] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 53.041554][ T5910] vhci_hcd: connection reset by peer [ 53.088363][ T5819] vhci_hcd vhci_hcd.2: stop threads [ 53.092400][ T5819] vhci_hcd vhci_hcd.2: release socket [ 53.118137][ T5819] vhci_hcd vhci_hcd.2: disconnect device [ 53.459826][ T5898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.047488][ T5931] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 54.050122][ T5931] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 54.055409][ T5931] vhci_hcd vhci_hcd.0: Device attached [ 54.473967][ T5750] Bluetooth: hci2: command tx timeout [ 54.474141][ T5746] Bluetooth: hci0: command tx timeout [ 54.477060][ T5750] Bluetooth: hci1: command tx timeout [ 54.543837][ T5750] Bluetooth: hci3: command tx timeout [ 54.546172][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801e8ad800: rx timeout, send abort [ 54.671234][ T5953] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 54.671234][ T5953] Please contact the netfilter-devel mailing list or update your nftables rules. [ 54.710611][ T5932] vhci_hcd: connection closed [ 54.713004][ T5792] vhci_hcd vhci_hcd.2: stop threads [ 54.717876][ T5792] vhci_hcd vhci_hcd.2: release socket [ 54.720205][ T5792] vhci_hcd vhci_hcd.2: disconnect device [ 54.951538][ T5959] overlay: ./file1 is not a directory [ 54.964920][ T42] audit: type=1800 audit(1785015664.133:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file0" dev="9p" ino=74743203 res=0 errno=0 [ 55.046422][ C3] vcan0: j1939_tp_rxtimer: 0xffff888029a6b400: rx timeout, send abort [ 55.050683][ C3] vcan0: j1939_tp_rxtimer: 0xffff88801e8ad800: abort rx timeout. Force session deactivation [ 55.541944][ T5967] Zero length message leads to an empty skb [ 55.549904][ C3] vcan0: j1939_tp_rxtimer: 0xffff888029a6b400: abort rx timeout. Force session deactivation [ 55.566099][ T5966] netlink: 'syz.3.20': attribute type 4 has an invalid length. [ 55.587335][ T42] audit: type=1800 audit(1785015664.753:3): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.20" name="file0" dev="9p" ino=74469327 res=0 errno=0 [ 55.738963][ T5970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.21'. [ 55.790271][ T5842] Process accounting resumed [ 55.864628][ T5970] Process accounting resumed [ 56.290712][ T5989] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 56.293211][ T5989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 56.306541][ T5989] vhci_hcd vhci_hcd.0: Device attached [ 56.543477][ T5750] Bluetooth: hci1: command tx timeout [ 56.553319][ T5750] Bluetooth: hci0: command tx timeout [ 56.553722][ T5746] Bluetooth: hci2: command tx timeout [ 56.623688][ T5746] Bluetooth: hci3: command tx timeout [ 56.624291][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 56.628765][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 57.162711][ T5997] ======================================================= [ 57.162711][ T5997] WARNING: The mand mount option has been deprecated and [ 57.162711][ T5997] and is ignored by this kernel. Remove the mand [ 57.162711][ T5997] option from the mount to silence this warning. [ 57.162711][ T5997] ======================================================= [ 57.357886][ T5990] vhci_hcd: connection reset by peer [ 57.362472][ T5792] vhci_hcd vhci_hcd.1: stop threads [ 57.367343][ T5792] vhci_hcd vhci_hcd.1: release socket [ 57.374317][ T5792] vhci_hcd vhci_hcd.1: disconnect device [ 57.745343][ T40] usb 42-1: device descriptor read/8, error -110 [ 57.831246][ T6019] futex_wake_op: syz.2.33 tries to shift op by 144; fix this program [ 57.834905][ T6019] futex_wake_op: syz.2.33 tries to shift op by 144; fix this program [ 57.919081][ T6020] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.924613][ T6020] block device autoloading is deprecated and will be removed. [ 58.240713][ T40] usb usb42-port1: attempt power cycle [ 58.614444][ T6026] Bluetooth: MGMT ver 1.23 [ 58.792669][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 58.976007][ T42] audit: type=1326 audit(1785015668.143:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 58.978901][ T6036] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.423114][ T40] usb usb42-port1: unable to enumerate USB device [ 59.556144][ T42] audit: type=1326 audit(1785015668.153:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.35" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.568442][ T42] audit: type=1326 audit(1785015668.153:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.586485][ T42] audit: type=1326 audit(1785015668.153:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.35" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.598426][ T42] audit: type=1326 audit(1785015668.153:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.610218][ T42] audit: type=1326 audit(1785015668.153:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.35" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.622879][ T42] audit: type=1326 audit(1785015668.153:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.645407][ T42] audit: type=1326 audit(1785015668.163:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.35" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf700efec code=0x7ffc0000 [ 60.240090][ T6054] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 60.242309][ T6054] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 60.246242][ T6054] vhci_hcd vhci_hcd.0: Device attached [ 60.428657][ T6036] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.524344][ T6036] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.533852][ T846] usb 38-1: SetAddress Request (2) to port 0 [ 60.548124][ T846] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 60.621403][ T6036] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.624439][ T5746] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 60.633310][ T5750] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.742239][ T5792] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.799271][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.815168][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.831025][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.184449][ T6055] vhci_hcd: connection reset by peer [ 61.191781][ T12] vhci_hcd vhci_hcd.0: stop threads [ 61.193697][ T12] vhci_hcd vhci_hcd.0: release socket [ 61.195336][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 61.342002][ T5453] veth1_vlan: left promiscuous mode [ 61.663473][ T29] usb 40-1: device descriptor read/8, error -110 [ 62.063826][ T29] usb usb40-port1: attempt power cycle [ 62.131054][ T6096] block nbd0: server does not support multiple connections per device. [ 62.138099][ T6096] block nbd0: shutting down sockets [ 62.396491][ T6098] bond1: entered promiscuous mode [ 62.657906][ T29] usb usb40-port1: unable to enumerate USB device [ 63.775976][ T6120] raw_sendmsg: syz.2.53 forgot to set AF_INET. Fix it! [ 63.842712][ T29] libceph: connect (1)[c::]:6789 error -101 [ 63.847772][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 63.899824][ T6120] ceph: No mds server is up or the cluster is laggy [ 64.316421][ T6127] 9p: Bad value for 'rfdno' [ 64.464278][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 64.464288][ T42] audit: type=1804 audit(1785015673.623:16): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.54" name="/newroot/11/cgroup.controllers" dev="tmpfs" ino=77 res=1 errno=0 [ 64.492325][ T42] audit: type=1800 audit(1785015673.633:17): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.54" name="cgroup.controllers" dev="tmpfs" ino=77 res=0 errno=0 [ 64.803390][ T5845] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.974020][ T5845] usb 5-1: Using ep0 maxpacket: 8 [ 64.978776][ T5845] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 64.982150][ T5845] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 64.985430][ T5845] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 64.988239][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.323016][ T6145] syzkaller0: entered promiscuous mode [ 65.325250][ T6145] syzkaller0: entered allmulticast mode [ 65.669015][ T846] usb 38-1: device descriptor read/8, error -110 [ 65.714398][ T6130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.990350][ T5842] usb 5-1: USB disconnect, device number 2 [ 66.020668][ T42] audit: type=1800 audit(1785015675.183:18): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.57" name="bus" dev="ramfs" ino=11556 res=0 errno=0 [ 66.061208][ T6153] mmap: syz.0.59 (6153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.065290][ T846] usb usb38-port1: attempt power cycle [ 66.245672][ T6155] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 66.599296][ T6155] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 66.609030][ T6155] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 66.614993][ T6155] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 66.619333][ T6155] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 66.622554][ T6155] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 66.651514][ T6155] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 66.655638][ T846] usb usb38-port1: unable to enumerate USB device [ 66.667869][ T6155] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 66.676698][ T6155] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 66.680034][ T6155] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 67.707331][ T6163] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 68.018049][ T42] audit: type=1326 audit(1785015677.183:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 68.034284][ T42] audit: type=1326 audit(1785015677.193:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.67" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf709efec code=0x7ffc0000 [ 68.043146][ T42] audit: type=1326 audit(1785015677.193:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 68.052003][ T42] audit: type=1326 audit(1785015677.203:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 68.083437][ T42] audit: type=1326 audit(1785015677.233:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.67" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709efec code=0x7ffc0000 [ 68.095802][ T42] audit: type=1326 audit(1785015677.253:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 68.126823][ T42] audit: type=1326 audit(1785015677.273:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.2.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 68.262285][ T6198] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 68.264378][ T6198] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 68.268756][ T6198] vhci_hcd vhci_hcd.0: Device attached [ 68.410958][ T6198] wg2 speed is unknown, defaulting to 1000 [ 68.420667][ T6198] wg2 speed is unknown, defaulting to 1000 [ 68.430402][ T6198] wg2 speed is unknown, defaulting to 1000 [ 68.533900][ T846] usb 44-1: SetAddress Request (2) to port 0 [ 68.538641][ T846] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 68.804752][ T29] wg2 speed is unknown, defaulting to 1000 [ 68.807791][ T6198] infiniband syz2: set active [ 68.810725][ T6198] infiniband syz2: added wg2 [ 68.826968][ T6198] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 68.832388][ T6198] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 68.841091][ T6198] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 68.955513][ T6198] RDS/IB: syz2: added [ 68.964595][ T6198] smc: adding ib device syz2 with port count 1 [ 68.995851][ T6198] smc: ib device syz2 port 1 has no pnetid [ 69.011188][ T29] wg2 speed is unknown, defaulting to 1000 [ 69.025581][ T6198] wg2 speed is unknown, defaulting to 1000 [ 69.041029][ T6206] netlink: 'syz.1.76': attribute type 10 has an invalid length. [ 69.076878][ T6199] vhci_hcd: connection reset by peer [ 69.103518][ T12] vhci_hcd vhci_hcd.3: stop threads [ 69.105183][ T12] vhci_hcd vhci_hcd.3: release socket [ 69.107749][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 69.120166][ T6206] team0: Port device dummy0 added [ 69.439770][ T6198] wg2 speed is unknown, defaulting to 1000 [ 69.845901][ T6198] wg2 speed is unknown, defaulting to 1000 [ 70.022580][ T6223] netlink: 'syz.1.70': attribute type 4 has an invalid length. [ 70.025075][ T6223] netlink: 152 bytes leftover after parsing attributes in process `syz.1.70'. [ 70.089198][ T6223] .`: renamed from bond0 (while UP) [ 70.109176][ T6220] netlink: 'syz.1.70': attribute type 8 has an invalid length. [ 70.843339][ T5845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.866058][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.868874][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.946725][ T6198] wg2 speed is unknown, defaulting to 1000 [ 71.015470][ T5845] usb 5-1: Dual-Role OTG device on HNP port [ 71.020806][ T5845] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 71.026460][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.033684][ T6233] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 71.035728][ T6233] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.065401][ T6233] vhci_hcd vhci_hcd.0: Device attached [ 71.107067][ T5845] gspca_main: spca501-2.14.0 probing 0000:0000 [ 71.107835][ T5845] gspca_spca501: reg write: error -32 [ 71.107844][ T5845] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 71.107880][ T5845] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 71.117764][ C2] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 71.117785][ C2] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 71.117801][ C2] CPU: 2 UID: 0 PID: 5845 Comm: kworker/2:4 Not tainted syzkaller #0 PREEMPT(full) [ 71.117820][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.117831][ C2] Workqueue: usb_hub_wq hub_event [ 71.117849][ C2] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 71.117862][ C2] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 71.117873][ C2] RSP: 0018:ffffc900005389e8 EFLAGS: 00010002 [ 71.117882][ C2] RAX: dffffc0000000000 RBX: ffff88806ba10000 RCX: ffffffff87e52019 [ 71.117888][ C2] RDX: 00000000000000e6 RSI: ffffffff87e51e56 RDI: ffff88806ba10128 [ 71.117895][ C2] RBP: ffff88806ba10128 R08: 0000000000000004 R09: 0000000000000020 [ 71.117902][ C2] R10: 0000000000000020 R11: 000000000000756b R12: ffff88806ba100f0 [ 71.117908][ C2] R13: ffff88806ba10128 R14: ffff88806ba10740 R15: 0000000000000001 [ 71.117915][ C2] FS: 0000000000000000(0000) GS:ffff888096de5000(0000) knlGS:0000000000000000 [ 71.117939][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.117948][ C2] CR2: 000055b2acffa000 CR3: 0000000073f28000 CR4: 0000000000352ef0 [ 71.117955][ C2] Call Trace: [ 71.117958][ C2] [ 71.117964][ C2] f_midi2_set_alt+0x444/0x5f0 [ 71.117978][ C2] composite_setup+0x16f8/0x9290 [ 71.117995][ C2] ? __lock_acquire+0x49f/0x1a40 [ 71.118013][ C2] ? slab_free_after_rcu_debug+0x4c/0x170 [ 71.118027][ C2] ? __pfx_composite_setup+0x10/0x10 [ 71.118043][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.118055][ C2] ? do_raw_spin_lock+0x128/0x260 [ 71.118066][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.118078][ C2] ? configfs_composite_setup+0xfb/0x130 [ 71.118091][ C2] configfs_composite_setup+0xfb/0x130 [ 71.118104][ C2] dummy_timer+0x2062/0x36c0 [ 71.118116][ C2] ? do_raw_spin_lock+0x128/0x260 [ 71.118127][ C2] ? find_held_lock+0x2b/0x80 [ 71.118142][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 71.118154][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 71.118170][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 71.118191][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 71.118201][ C2] ? mark_held_locks+0x40/0x70 [ 71.118218][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.118229][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 71.118239][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 71.118254][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 71.118267][ C2] handle_softirqs+0x1ea/0x9b0 [ 71.118280][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 71.118292][ C2] ? _raw_spin_unlock+0x28/0x50 [ 71.118302][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 71.118316][ C2] __irq_exit_rcu+0x162/0x210 [ 71.118327][ C2] irq_exit_rcu+0x9/0x30 [ 71.118339][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 71.118351][ C2] [ 71.118354][ C2] [ 71.118358][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 71.118371][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 71.118382][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 39 2a f6 48 89 df e8 9e 88 2a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 98 19 f6 65 8b 05 ee 88 a8 08 85 c0 74 16 5b [ 71.118392][ C2] RSP: 0018:ffffc900069a6928 EFLAGS: 00000246 [ 71.118401][ C2] RAX: 0000000000000006 RBX: ffff8880281dc000 RCX: 0000000000000040 [ 71.118408][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a7e36 RDI: ffffffff8c400980 [ 71.118414][ C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 71.118420][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 71.118427][ C2] R13: ffff888024638478 R14: 0000000000000000 R15: ffff888024638400 [ 71.118436][ C2] dummy_urb_enqueue+0x56c/0x880 [ 71.118447][ C2] ? bus_for_each_drv+0xe1/0x1e0 [ 71.118460][ C2] usb_hcd_submit_urb+0x268/0x2150 [ 71.118477][ C2] ? __device_attach+0x1e4/0x4d0 [ 71.118495][ C2] ? device_initial_probe+0xaf/0xd0 [ 71.118509][ C2] ? bus_probe_device+0x64/0x160 [ 71.118521][ C2] ? device_add+0x121d/0x1970 [ 71.118537][ C2] ? usb_new_device.cold+0x685/0x115c [ 71.118549][ C2] ? hub_event+0x30a3/0x4a60 [ 71.118563][ C2] ? process_one_work+0xa23/0x1940 [ 71.118579][ C2] usb_submit_urb+0x827/0x19b0 [ 71.118591][ C2] ? __init_swait_queue_head+0xca/0x150 [ 71.118603][ C2] usb_start_wait_urb+0x10e/0x580 [ 71.118615][ C2] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 71.118627][ C2] ? trace_kmalloc+0xeb/0x110 [ 71.118643][ C2] ? __asan_memset+0x23/0x50 [ 71.118655][ C2] usb_control_msg+0x328/0x4b0 [ 71.118667][ C2] ? __pfx_usb_control_msg+0x10/0x10 [ 71.118679][ C2] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.118692][ C2] usb_control_msg_send+0xca/0x130 [ 71.118705][ C2] usb_set_interface+0x9b6/0xe20 [ 71.118721][ C2] snd_usb_midi_v2_create+0x629/0x4070 [ 71.118735][ C2] ? __mutex_unlock_slowpath+0x35d/0x930 [ 71.118749][ C2] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 71.118762][ C2] ? snd_info_create_entry+0x6f/0x400 [ 71.118772][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 71.118790][ C2] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 71.118803][ C2] ? snd_info_create_entry+0x314/0x400 [ 71.118813][ C2] ? usb_ifnum_to_if+0x16f/0x1d0 [ 71.118835][ C2] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 71.118862][ C2] usb_audio_probe+0xf05/0x3b10 [ 71.118888][ C2] ? __pfx_usb_audio_probe+0x10/0x10 [ 71.118939][ C2] ? do_raw_spin_lock+0x128/0x260 [ 71.118956][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 71.118969][ C2] ? mark_held_locks+0x40/0x70 [ 71.118984][ C2] ? _raw_spin_lock_irqsave+0x52/0x60 [ 71.118995][ C2] ? mark_held_locks+0x40/0x70 [ 71.119012][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.119023][ C2] usb_probe_interface+0x303/0x8f0 [ 71.119040][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 71.119057][ C2] really_probe+0x241/0xa60 [ 71.119075][ C2] __driver_probe_device+0x20e/0x450 [ 71.119090][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.119106][ C2] driver_probe_device+0x4a/0x140 [ 71.119120][ C2] __device_attach_driver+0x1df/0x320 [ 71.119136][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 71.119150][ C2] bus_for_each_drv+0x159/0x1e0 [ 71.119162][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 71.119174][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 71.119191][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 71.119202][ C2] __device_attach+0x1e4/0x4d0 [ 71.119221][ C2] ? __pfx___device_attach+0x10/0x10 [ 71.119241][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.119260][ C2] device_initial_probe+0xaf/0xd0 [ 71.119283][ C2] bus_probe_device+0x64/0x160 [ 71.119304][ C2] device_add+0x121d/0x1970 [ 71.119332][ C2] ? __pfx_device_add+0x10/0x10 [ 71.119361][ C2] usb_set_configuration+0xd97/0x1c60 [ 71.119385][ C2] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 71.119398][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 71.119410][ C2] usb_probe_device+0xef/0x400 [ 71.119424][ C2] ? __pfx_usb_probe_device+0x10/0x10 [ 71.119440][ C2] really_probe+0x241/0xa60 [ 71.119454][ C2] __driver_probe_device+0x20e/0x450 [ 71.119468][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.119484][ C2] driver_probe_device+0x4a/0x140 [ 71.119498][ C2] __device_attach_driver+0x1df/0x320 [ 71.119513][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 71.119528][ C2] bus_for_each_drv+0x159/0x1e0 [ 71.119539][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 71.119551][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 71.119563][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 71.119574][ C2] __device_attach+0x1e4/0x4d0 [ 71.119589][ C2] ? __pfx___device_attach+0x10/0x10 [ 71.119604][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 71.119616][ C2] device_initial_probe+0xaf/0xd0 [ 71.119631][ C2] bus_probe_device+0x64/0x160 [ 71.119644][ C2] device_add+0x121d/0x1970 [ 71.119661][ C2] ? __pfx_device_add+0x10/0x10 [ 71.119677][ C2] ? usb_detect_static_quirks+0x335/0x3e0 [ 71.119693][ C2] usb_new_device.cold+0x685/0x115c [ 71.119706][ C2] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 71.119719][ C2] ? __pfx_usb_new_device+0x10/0x10 [ 71.119734][ C2] ? mark_held_locks+0x40/0x70 [ 71.119751][ C2] hub_event+0x30a3/0x4a60 [ 71.119769][ C2] ? __pfx_hub_event+0x10/0x10 [ 71.119784][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 71.119801][ C2] ? rcu_is_watching+0x12/0xc0 [ 71.119816][ C2] process_one_work+0xa23/0x1940 [ 71.119833][ C2] ? __pfx_process_one_work+0x10/0x10 [ 71.119850][ C2] ? __pfx_hub_event+0x10/0x10 [ 71.119865][ C2] worker_thread+0x5ef/0xe50 [ 71.119882][ C2] ? __pfx_worker_thread+0x10/0x10 [ 71.119897][ C2] ? kthread+0x13a/0x450 [ 71.119911][ C2] ? __pfx_worker_thread+0x10/0x10 [ 71.119925][ C2] kthread+0x370/0x450 [ 71.119939][ C2] ? __pfx_kthread+0x10/0x10 [ 71.119953][ C2] ret_from_fork+0x72b/0xd50 [ 71.119966][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 71.119979][ C2] ? __switch_to+0x800/0x10f0 [ 71.119996][ C2] ? __pfx_kthread+0x10/0x10 [ 71.120010][ C2] ret_from_fork_asm+0x1a/0x30 [ 71.120028][ C2] [ 71.120032][ C2] Modules linked in: [ 71.120041][ C2] ---[ end trace 0000000000000000 ]--- [ 71.120046][ C2] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 71.120058][ C2] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 71.120068][ C2] RSP: 0018:ffffc900005389e8 EFLAGS: 00010002 [ 71.120076][ C2] RAX: dffffc0000000000 RBX: ffff88806ba10000 RCX: ffffffff87e52019 [ 71.120083][ C2] RDX: 00000000000000e6 RSI: ffffffff87e51e56 RDI: ffff88806ba10128 [ 71.120089][ C2] RBP: ffff88806ba10128 R08: 0000000000000004 R09: 0000000000000020 [ 71.120096][ C2] R10: 0000000000000020 R11: 000000000000756b R12: ffff88806ba100f0 [ 71.120102][ C2] R13: ffff88806ba10128 R14: ffff88806ba10740 R15: 0000000000000001 [ 71.120109][ C2] FS: 0000000000000000(0000) GS:ffff888096de5000(0000) knlGS:0000000000000000 [ 71.120134][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.120143][ C2] CR2: 000055b2acffa000 CR3: 0000000073f28000 CR4: 0000000000352ef0 [ 71.120151][ C2] Kernel panic - not syncing: Fatal exception in interrupt [ 71.120826][ C2] Kernel Offset: disabled