last executing test programs: 24m52.515128407s ago: executing program 32 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900"], 0xe4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 16m10.733844439s ago: executing program 33 (id=3092): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 14m53.799819247s ago: executing program 6 (id=3564): r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a440000102030109021b000101ff20cd090400fd440701013d0905010220"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r3, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYBLOB="42992c4f0dbc60b21c3b70c21dcc6e4a45d239d574aa6bf12ad1b68708c9b654c906ab69d1"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) setpriority(0x1, 0x0, 0x477f) syz_usb_control_io(r2, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="00031b0000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) syz_usb_disconnect(r2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e751d"], 0x24) syz_usb_control_io$printer(r2, &(0x7f0000000100)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0xc9, {0xc9, 0xa, "4651e97ec43bc8fe90603086b9d8d77816d74ad78a0fe43c838cf4be15d4d7b9163e7960889db34cd2408448d1120c063eb4221202511b617562973ec4eaed38d034549f7634794174a75f4dd97765a0d1d7b1589190a11a99782c4d29d608833402ee12ee031b61acfa72c23f598f20e2b66ae9561e0b45a94a9ab55ff523e5ba4e80f725ba1c035ab001d4ea958262eb44f2acde785fdf19b4898847807d2176359f980a82828813c030e0d8b1ceb6cc331d5611b43aa7ed1be704543bb331592468bda4f8c22c8e2ff04d"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000580)={0x34, &(0x7f0000000140)={0x40, 0x17, 0xfffffffffffffe71, "df9b10f989b51643a0b5c26fc3d2cd94e4a8555c3c22692da6cfd0ac9e0dc93d6ff9482cae42a39a64d2f7ad035f8e2104bb"}, &(0x7f00000001c0)={0x0, 0xa, 0xfffffffffffffd5b, 0xe}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x74, {0x72, "9927cfb9e563f2cd6e1b6adbd814ec34b82e91d308f781e62725a435f8ce30195f2835b18f81325482b72ab334c53be17996d6caefa03c0004c271c1accc561de454ad2c65bb3db1c419a40111b9b435f071444468d8abaa0348f28327cd2ca2928cba9372715ff57fc7d305733ac9697a70"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x80}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r6}, 0x10) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) shutdown(r1, 0x0) recvmmsg(r7, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x102, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000000040)='(', 0x1) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 14m49.755248694s ago: executing program 6 (id=3581): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x400, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000024000380200000800800034000000002"], 0xe4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}]) memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x940c, 0x3002, 0x320, 0x2c0, 0x440, 0x3d8, 0x3d8, 0x440, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xffff00, 0x0, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xffffff00], 0x4d6, 0x3505, 0x5e, 0x1, 0x7, 0x1e}, {@ipv6=@local, [0x0, 0x0, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xff000000], 0x4d4, 0x3504, 0x33, 0x1, 0x12}, {@ipv4=@remote, [0x0, 0xff, 0x0, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xff, 0xffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x2c, 0x1, 0xb, 0x7}, {@ipv4=@private=0xa010102, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@remote, [0xef7a3ce5cc6f2af0, 0x0, 0xffffff00, 0xffffff00], 0x4d2, 0x3507, 0x5e, 0x1, 0xa, 0x1e}], 0x3, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xc33e1565a1dcd696, 0xff000000], 'veth1_to_bond\x00', 'erspan0\x00', {}, {0xff}, 0xc, 0x8, 0x2, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x1, 0x2, 0x0, 0x1, 0x182, 0x2214}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x9, 0x7, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000840)={'syz1\x00', {0x0, 0x1}, 0x0, [0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x400000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)) 14m49.341454567s ago: executing program 6 (id=3584): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000600), &(0x7f0000001380)=@udp}, 0x20) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) 14m49.230646379s ago: executing program 6 (id=3585): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(0x0, 0x1, 0x668240) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x110) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r2, &(0x7f0000000300)=ANY=[], 0x40) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2062) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000400)) r6 = gettid() ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000240)={0x8abb, 0x6}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r7, &(0x7f0000000000)="3b000300010006", 0x7) rt_sigtimedwait(&(0x7f0000000080)={[0x10000000000003ff]}, &(0x7f00000000c0), 0x0, 0x8) tkill(r6, 0x7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd6001070000081100fc010000000000000000000000000000ff02000000000000000000000000000100000e220008907817a7dce7f8385b78fc44d40ba39deb680bd77ff76c119792c403dbdc2ac88c470b2ad6a159951713b52f7f95d13a12380b89788562c47e37e21d574a01437c5890e788d5917b4bc6b8c31a1b39899209189d3c183d094b224c40f7a59ef5cda715ebaedb9fc2c34f651878d5e06db54e205cec20d71192b4249a25815d8ac2d222e1"], 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 14m47.562279672s ago: executing program 6 (id=3588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0c002380080009000122e469100f2bc2800000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0xe, @pix={0x2, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x2, 0x5}}) 14m47.170993287s ago: executing program 6 (id=3593): r0 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e6572696300"], 0xe0}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r5, 0x801, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10080000}, 0x4004c040) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="8000000040000900fffffffffddbdf250100000004001f0067000180664daf258404000000b071068ff774eed479ee4e29250582681b6edd83f3af6cb8803c581cef8f169bc52f97b3ced597fe5a237df002de7f7dac8d812d5d21fa6fe19b7400a22e1694a2aa33b57d477772f385cbe8099645ce50ee1631df8cc496d22600"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044880}, 0x4004054) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r7, 0xa, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCGDEV(r11, 0x80045432, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) 14m46.446738454s ago: executing program 34 (id=3593): r0 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e6572696300"], 0xe0}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), r4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r5, 0x801, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10080000}, 0x4004c040) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="8000000040000900fffffffffddbdf250100000004001f0067000180664daf258404000000b071068ff774eed479ee4e29250582681b6edd83f3af6cb8803c581cef8f169bc52f97b3ced597fe5a237df002de7f7dac8d812d5d21fa6fe19b7400a22e1694a2aa33b57d477772f385cbe8099645ce50ee1631df8cc496d22600"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044880}, 0x4004054) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r7, 0xa, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCGDEV(r11, 0x80045432, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) 9m56.446818893s ago: executing program 2 (id=5037): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000680)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000006c0)='\xb3,+)z&@\x00', &(0x7f0000000700)='+\x00', 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f0000000300)=""/200, 0xc8}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x4, &(0x7f00000019c0)=""/4096, 0x1000}, 0xc}, {{&(0x7f0000000400)=@caif, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000280)=""/63, 0x3f}], 0x2, &(0x7f00000005c0)=""/35, 0x23}, 0x3}], 0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 9m54.085072928s ago: executing program 2 (id=5045): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @private1, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x1000004) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@lu}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m52.955276442s ago: executing program 2 (id=5052): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000000)={0x4, 0x2, 0xb, 0x3, 0xc7, 0x0, 0x80, 0x7f, 0x4, 0x3, 0x85, "8461e65de59dd4c2fcabc090b93347f3151a98dd874bd1804a624c04dd1de26b"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) socket$inet6(0xa, 0x2, 0x3a) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x288040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x846804, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r8, 0x4008ae48, 0x0) ioctl$mixer_OSS_GETVERSION(r6, 0x40086602, &(0x7f0000000000)) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0xb, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 9m51.291495644s ago: executing program 2 (id=5056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x4) 9m51.169252327s ago: executing program 2 (id=5057): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1700409e000000000400527471940088be47aafbd8790270c982ebe040ae78281f05d1b2bf5529b61aaf3e246c6ef960d5141ef3b9b92154db424c4d98bd469a050a43aced9a78f0c00fd41c2fb4dc990d584b7889cd6670e4224be6ce0b917086696369801c9c7dfd0f56f4a3e5caa4122dcbf1d869d3e0a298f129c3d806c86822e2259824d5ebf96401fc4444f5fa7c2eef0689276273191b32dff500"/171, @ANYRES32=r3, @ANYBLOB="9fff8d9b31eda25bac08cbf19cc6fe76b1a423cf3341e9d015a02dacd3243d60a7d33c640668063a96b9a8fb4236417f2c2c9745b56b88565c6002d6731f796a92c5f1bdb4ed7180fc88f7d343ff9e953a753842228079fafa01dc829981a4772a8219ec968d1164d2ff98f5f2b362d14d79673dece0d287eb1ec358408ee90d26bd7a355477a9931d17310e0aef90c92948a40592e49966a71c2d1cc129bb15fcab01ef0682c0e361", @ANYRES32=r1, @ANYBLOB='\x00'/16], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000180)={0x0, r3}, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0xfffc, @private}, 0x4}}, 0x26) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x4040000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000280)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r8, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r7, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r9, 0xffffffffffffffff, 0x0) 9m50.024763304s ago: executing program 2 (id=5061): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r5, r6) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xa0200, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f00000008c0)) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) 9m33.897960963s ago: executing program 35 (id=5061): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r5, r6) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xa0200, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f00000008c0)) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) 6m55.504426404s ago: executing program 8 (id=5779): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r2 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x1, 0x1000000, @remote, 0x8000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0xe0a2, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @pic={0x7, 0x3, 0xff, 0x9, 0x9, 0x3, 0x10, 0x6, 0x0, 0x2, 0x9, 0x1, 0x2, 0x2, 0x0, 0x80}}) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r6 = dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x1, 0x80, 0x9, '\x00', 0xa779}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x46, &(0x7f0000000040)=0xffffff0a, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB="34840a7961bc58f4f025207be3ae1010c4e6b6e4f75b1b34e5e0450206335aae5551eabf54325407987f4b4ffdd9fef81d191f8ffa0faffb9c6e746497350e3fc79cd6f2ddde82f3efcdd283b52d1c53bcfcf196909f94ce0c680e9bc7b0140a1b84f637939410d41b08c247177f5bf1abfcc359ab9195ee662442fff9b77e0f9d17e42dd6e249008834c2df4fb58a486d7d53fcf3d720c435b7d69b44f22bbb31eb5afce876c0", @ANYBLOB="00f3000000000098c3dcfc0800000000000000f7", @ANYRES32=0x0, @ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000100)={0x20000014}) epoll_wait(r10, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000005c0)={0xffffffffffffffff, 0x1, 0x0, 0x39, @vifc_lcl_ifindex, @local}, 0x10) ppoll(&(0x7f0000000480)=[{r8}, {r0}, {}], 0x3, 0x0, 0x0, 0x0) 6m54.479883708s ago: executing program 8 (id=5780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0xbce03000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x62211}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x24000030) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) 6m51.831988258s ago: executing program 8 (id=5786): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000005140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_cqring_wait\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000040)) io_uring_enter(r4, 0x0, 0x235c, 0x3, 0x0, 0x0) 6m50.178175528s ago: executing program 8 (id=5792): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1011, 0x0, 0x0, 0x0, 0x0, 0x0) 6m49.97540825s ago: executing program 8 (id=5793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x12c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@typed={0x104, 0x8, 0x0, 0x0, @binary="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"}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m47.919894381s ago: executing program 8 (id=5797): r0 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x7) (async, rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) (async) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) (async) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8d) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)}], 0x1, 0x0, 0x20, 0x6044}, 0x6) (async) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e3, &(0x7f0000000200)) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev, 0x9, r10}) (async) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000004c40)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r10}, 0x14) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000018780000000000000000000018110000329034c549ff89fdd2ce4e0a878a5f0d5d11d5283318600fa0a58e8929ebf99687a60e0dbc5b3d0134b1ef186de2106422a1946319f6e38b", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000f9ffffff6299800010000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0xee33, 0x88, &(0x7f0000000480)=""/136, 0x41100, 0x4b, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x923d, 0x665d1ec6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async, rerun: 32) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r4, 0x0) (rerun: 32) mount$bind(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$SG_GET_COMMAND_Q(r11, 0x2270, &(0x7f0000000380)) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x7, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000140)="2d9a090500f47232c4c304f48803046f3512598c178252d92e8495414f7e0962b6bcc200ecad915786df7b994e7e57f74fb56e75f2e636fa397437fcb91237d3ac73b8c29f8400f69a83029e44bf22ea92", 0x51, r7) 6m47.798800158s ago: executing program 36 (id=5797): r0 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x7) (async, rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) (async) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) (async) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8d) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)}], 0x1, 0x0, 0x20, 0x6044}, 0x6) (async) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e3, &(0x7f0000000200)) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev, 0x9, r10}) (async) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000004c40)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r10}, 0x14) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000018780000000000000000000018110000329034c549ff89fdd2ce4e0a878a5f0d5d11d5283318600fa0a58e8929ebf99687a60e0dbc5b3d0134b1ef186de2106422a1946319f6e38b", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000f9ffffff6299800010000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0xee33, 0x88, &(0x7f0000000480)=""/136, 0x41100, 0x4b, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x923d, 0x665d1ec6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async, rerun: 32) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r4, 0x0) (rerun: 32) mount$bind(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$SG_GET_COMMAND_Q(r11, 0x2270, &(0x7f0000000380)) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x7, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000140)="2d9a090500f47232c4c304f48803046f3512598c178252d92e8495414f7e0962b6bcc200ecad915786df7b994e7e57f74fb56e75f2e636fa397437fcb91237d3ac73b8c29f8400f69a83029e44bf22ea92", 0x51, r7) 6m47.690770792s ago: executing program 7 (id=5800): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x288000, 0x0) read$snapshot(r0, 0x0, 0x0) 6m47.523884027s ago: executing program 7 (id=5801): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2005, "00000000000000000000002000000005"}}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x9e0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0906, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400380, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 6m44.742713067s ago: executing program 7 (id=5812): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x1000, 0x0, 0x3f, 0x0, 0x0, 0x0) 6m44.171161166s ago: executing program 7 (id=5814): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000080000004000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={0xffffffffffffffff, r1, 0x25, 0x8, @void}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280), &(0x7f00000001c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00768a8ffab58830d60000000000000200000024000180f0fd018008000100e000000108000200ac1e00010000018000000100ac1414bb00000200e0000002240002800c000280050001000000000014000180050001007f00000108000200ac141400"], 0x5c}}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x29, 0x66, 0xffffffff80000002, 0x8, 0x0, 0x5, 0x5a, 0x0, 0x0, 0x40, 0x6}}, 0x50) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000140)={0x14, &(0x7f0000000180)=ANY=[], 0x0}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r6, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x48000, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0xfffffffffffffdf4) 6m40.743730581s ago: executing program 7 (id=5822): syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="29a250647b7daaf743869d90fbd1467951de9a58c76db83452c3126932142391e25ac8442ac9ed2502cc71d074aad6164bf16c7bc8ecf66ba93f4e624bfb15093434306fcc73ef14b344e619a76012d2228542930a46bccb8047b955a29806570063d8d1a82c3b6dec3086cae098eaa0aa195dfc8f8ea5a312eef36a96391131173d450389f15dbc01f6e45bda6b5454edabd54f96"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r2}, 0x10) geteuid() 6m39.638610147s ago: executing program 7 (id=5825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = memfd_create(&(0x7f0000000840)='v\xa6\xf5l\xea6,r\xaf\xe8\x10/\xec\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8b\x84\x86t\xeb1\xfb\x95|\x84\xefo\xb2\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xc1)\x81\x1e\x00\x00\x11D\x90\xf5\xbb\x1c\xac\xc7\xadI\xafF\xdd\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x95\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS\xe7\xef\a\xb5\xe6/\x7f\\\xea\x05`l\x00\x00xmK\xb4\xb5\xb9\xe9V\x0e_\xca|\xbdi\xcb\xd3\x00\x00\x00\x00\x00\x1f\b:\x05\xf6#\xf1\x9d\xdd\t\xc4i\x01\x8c\xf3\x1c', 0x2) write(r2, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d", 0x22) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x4, 0xfc, 0x0, 0x5a, 0xff, 0x6, 0x0, 0x49}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}], 0x9}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/snmp6\x00') r9 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r9, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r7, 0xa800a000) 6m39.279895579s ago: executing program 37 (id=5825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = memfd_create(&(0x7f0000000840)='v\xa6\xf5l\xea6,r\xaf\xe8\x10/\xec\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8b\x84\x86t\xeb1\xfb\x95|\x84\xefo\xb2\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xc1)\x81\x1e\x00\x00\x11D\x90\xf5\xbb\x1c\xac\xc7\xadI\xafF\xdd\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x95\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS\xe7\xef\a\xb5\xe6/\x7f\\\xea\x05`l\x00\x00xmK\xb4\xb5\xb9\xe9V\x0e_\xca|\xbdi\xcb\xd3\x00\x00\x00\x00\x00\x1f\b:\x05\xf6#\xf1\x9d\xdd\t\xc4i\x01\x8c\xf3\x1c', 0x2) write(r2, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d", 0x22) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x4, 0xfc, 0x0, 0x5a, 0xff, 0x6, 0x0, 0x49}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}], 0x9}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/snmp6\x00') r9 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r9, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r7, 0xa800a000) 5m5.535736201s ago: executing program 5 (id=6179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000016c0), 0x100, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0x4018aee2, &(0x7f0000002d00)=""/5) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x2, {0x2, 0x21}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x0, 0xb, 0x8, "852e5e4ed8746e20"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x0, 0xc7, {0xc5, "42e84db2f4900e71e24eb877768dfc80a009218e42601b8e8c31694f6f1c5211fddee6ef060509357c091a508297b769f84018116b041d0321865f15c626647e97dc36700235b1e3949c6782e89ebf74446873878f78d0516281812fe9e17da4d495c41b2200a3f2f00efb2afdb49174f73f81105d9783dc3d2f617f095e432590d00ef1aa5a5fa1afae5f69bd765ac7cfbcfe369d08401943fffe3329e5cb5d9ac38d163cf31e15bb4a17977d94fe22ed19b757b4a847659fd311d20ea16f340bab3d7091"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x89}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x8}}) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)={0x20, 0x1, 0x4, "ad610d13"}, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="4021ca000000ca0d2688dfee8e8fb1bbe7de313fd0637c2619d13eec40e3dc39c9afd525ab3be6fec99445f7d97501295c9f16618fb4d4455cb778a1fda119912daf8e826c6a18c21d53c8e9907a09854d0829bf2fc803ce00d0b9942130bf3655dfcbd863b665a68fde0dee1f7420f22e0bd8e5cc07784cbdc079629b99323a75d6463d82ef6ba1e1b0e0ae1e43581a76c768859b5af7a1114c6b06c0b8760d0e6c229baf2337e60c56be94d129c90087a8bb7c3788ffc72d4f2d50cb162346baa33164d6f2aac8016a24921a2dc766"], &(0x7f0000000600)={0x0, 0x3, 0x54, @string={0x54, 0x3, "049b4c845bf9f4ef063a46ac88dbcacb7be8c44a9b4212df647eea0d822ca24e0a7a1c995717028c32d0a83a74d8180f1baa5077f5bf5cddf3ca968a91c32aa8696a2774ba30081c08d87a7dcf883cd25923"}}, &(0x7f0000000040)={0x0, 0x22, 0x1c, {[@local=@item_4={0x3, 0x2, 0x5, "68b91272"}, @local=@item_012={0x0, 0x2, 0x1}, @local=@item_012={0x2, 0x2, 0x5, "5ed0"}, @local=@item_012={0x2, 0x2, 0x7, "f266"}, @global=@item_012={0x1, 0x1, 0x7, "ca"}, @global=@item_012={0x2, 0x1, 0x5, 'x?'}, @main=@item_4={0x3, 0x0, 0xa, 'n4Yx'}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_4={0x3, 0x2, 0xa, "f0adad1c"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc5, 0x3, 0x1, {0x22, 0xdee}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x40, 0x3, 0x5b, "a829bdf6e42c1b8982f5730f08aea569247363bf5762e70d84e92b6de9606bc2bc5b570d2c2a7043939c3bd141aaba051e4facb6870bf3543b726015281f1157fc373f6604677833dceff446e738dd176c26f16967ac20cdd2ee26"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xb9}, &(0x7f0000000780)={0x20, 0x1, 0xc7, "35988c1ec0588edf7b19f69f2133bb4d2270675bc39dd6c3ce355061783e94b340312efb3339c36272afdca5bce8a18254f5a10181375eac83c11e678a38b00a2334dbf4644aae2831288ebe7232eb792b6cf1f59d81b2e16dd00a49b25a0209b62cb4ce832c462f16b067a91a574195f6716d33fbd0eb11a6d282dbdd46ecd60e91ab4f368aff71f778ee10d9d86cef0d2896a43aeb64628862e4a154a6734b4456ced8e8f34cc4f7f4ec385a1a9fe7bb9388999356ed633bcdda8b61772aaadacd5d568e9283"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x66}}) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='configfs\x00', 0x1) syz_usb_connect(0x0, 0x1db, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0xf7, 0x68, 0xf5, 0x10, 0x499, 0x1038, 0x7b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c9, 0x1, 0x6, 0x7, 0x0, 0xe, [{{0x9, 0x4, 0x5, 0x0, 0x4, 0xed, 0xf1, 0x31, 0x8, [@generic={0xcd, 0x4, "2e27f8fa3a6db8174617606d960a495f9f9900cb4a3d892ff5521193791d47458e14fde620d882f9995781d3d12971d2849cd13912daafa5c97f12cfbffad43fec5cd0f8299aa7a6aa3388facd17fe826aaaa3636d4100885f8e2ba7ab98248898cfc3d927c4a7c72291f03338e603a290fb7b499c1ea5bc4d0da9f70640822e78eadea7d5ca24ea5273155b6e3c27f59b6f97188a8d1fb2be30fdc0566834d780652846b15bca1a7b798d2f2705e65e5661d5db1b810d1a5788ea562750fa7985176edcd2a421f2f6b59a"}], [{{0x9, 0x5, 0x4, 0xc, 0x40, 0x2, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x9}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x0, 0x8, 0x5, [@generic={0x58, 0x21, "7803fce1c9681260032416eaefc2f75f3530248a22776434b69a8c73bee43e569dd2284dda5059e2fbf22ce4e7c917118f4c97a4dbcdb7ba0c1ca201f440ba8d895ee16ffa973874757fc2c946fcbcc392716a979286"}, @generic={0x59, 0x21, "f029020e42b568b45706a851d9c1434f574468b3dd211d95c5a5b949738d96d6de72fe80ed9d984b87e70e429ef2f1c08ce9ac890013178d30d83db32207571cac03d720e026c1f2f1732848b43e942f1b8c59d474dd63"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x3, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x80}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x4, 0xb4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xa00}]}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x5, 0x8, 0x5, 0x8, 0xff}, 0x10, &(0x7f0000000c00)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0xe, 0x87, 0xffff, 0x1}]}, 0x3, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x458}}]}) 5m2.007918076s ago: executing program 5 (id=6191): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r4, 0xc028aa03, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x22, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @null}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000f1401000000000000000000080003000100006ad851204d303113e41e8830969b1230f8b49d19a84a9472627300000800010000000000"], 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002c00010324bd7002f9dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) 5m0.973854432s ago: executing program 5 (id=6194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000380)={0x8, [0xfdaf, 0x1f69, 0x82, 0x4, 0xffd0, 0x2, 0xd, 0x8, 0x8, 0x7, 0x80, 0x8, 0x2, 0x6, 0xbcc4, 0x1f58, 0xb, 0x9, 0x7fff, 0x80, 0x101, 0x1, 0x7159, 0x8001, 0x1, 0x8000, 0x8, 0x9, 0x2d, 0x100, 0xbd, 0x3, 0xfff8, 0x7, 0x9578, 0x0, 0xff, 0xffff, 0x2, 0x1ff, 0xfffd, 0xfffc, 0x4, 0x4, 0xfedd, 0x9, 0x8, 0x7], 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xc}, 0x18) socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='tbans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',cache=loose,cache=none,k']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 4m58.162946943s ago: executing program 5 (id=6202): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000004c0)={0x80000000, &(0x7f0000000380), &(0x7f0000000440)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000940)={r1, &(0x7f0000000500), &(0x7f0000000580)}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)="d01d4881040cc19a2d2902fdf1d9752173744eebf9f976c207090ab9fc54e1fb15e5ffa4c7270a3d53d0f32cc6327d256ad8a00d8e75f29964d103fdc71b9908bc4ab7d37ecfbbbf3bc0b0c479e116d2218b3925993d746023936cea5863e7848744fd9d5c6edbb2c1d983acf3c2306c2836e49c43ff2c73fd63e5053796d286fbc5668bd46a24b6bade7fd81722cdd380d60d2d766d423d39a44bee9338bcfdbc5b7f9aaaa7272204318eb1", 0xac}, {&(0x7f0000000600)="2f93d03e2cfb89899731ed288170cddf5b2574413bc35f5e13d9b9ae2ef52e3df3f8583ec1af0d4827f158d460614c0544736b46525bdb3f55fc73f9221afd736195878213ce586e1c5d2c649e8b6311ca08", 0x52}, {&(0x7f0000000680)="08d2b34202714819c197b30f8ba13580938482f540383eac7db53d31277793b41e76725eedfbfab0959bd2c19320bb4d71248f5c31c01346614b1f14f56f937fa0d7c09cc3b3d21c128500e50c7b175ae43de3aae409c0b35c537259d73a0784c35f11bf9a2c2a072b1fd03ae77cc4bfd31176cb6dc0042e3bcd8a61532784517e3a3ce93af7f3efb3801697c857629f2b461aa2291233b44af3713a983fb7f9ed437787576a37bdf3a23f7afb2a1b8d52d1250697f46225e15f06cc665643a68809a0491cd679456ee0c526b5fdc9ad7b5f86a0591171e3bf527c4febf9eb04d884", 0xe2}, {&(0x7f0000000200)="31cc3866a6a36f9449351da1e4d3078205dc18acce30c5f901d82e4c5902517b3ccf29fd1e871accb43d549e5e0d43c7c6b16fde09f1e4d7860a28b5b331c81ff3e24358a92759f1ccfe30575a87a3979d6d27a3f6f884125b329271e8f7f87aefb58d7706e9b4dfeea27628387d651064ffe53b9a750193f8d7f01df4c9cf79628e47635fabf4e4fb4cb8b55133796aa92b950ab4b630a7abec8c71d1786b26d64a943a8e9b97a9667de99bdcb348a1500a28", 0xb3}, {&(0x7f0000000340)="711e40d6c390ec48400d89504fa372ebab8021da338157cb2e2d0e5c4b02330451ce7cb9ef975fa30229f8d3d38dbb0abbbe398e5b161f7b6f84be8030451059bae6fe94a58c77da3b4d9a37a4e8db9b291b804adaa9519b24b980bcb8379bf758b95f3dacbfdabec4d00d2907ed95636c4146117a266487cd85cc9a7aa76f924a38e71149273b2c6a229f68805610a726045e7ac0fb7f3e71775c090069edf1dd46d530146acf3cdb77673e5d1d52543739336f2ebbc4b1", 0xb8}, {&(0x7f0000000940)="ea8ec431fc3d5ac50eca82e69a6955b6af3f3adc0b9a779665e5f2b6b2d0e6d0dc82d427b57c2cccd5e71f9d662fb7440d0b52e17b", 0x35}], 0x6}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x2a0}, 0x1, 0x0, 0x0, 0x14}, 0x10) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="ff010000000000000019ef000001000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_setup(0x3336, &(0x7f0000000180)={0x0, 0x9a78, 0x1, 0x3, 0x3c7, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x2d) bind$802154_dgram(r6, &(0x7f00000000c0)={0x24, @none={0x0, 0xfffd}}, 0x14) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 4m57.175946125s ago: executing program 5 (id=6207): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r3, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x3, 0x3) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x9cd3, 0x7}, 0x1}, 0x20, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000980)={0x78e, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@gettaction={0x1f4, 0x32, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000890) 4m57.046190092s ago: executing program 5 (id=6210): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000120001000000000020000000ac141400000000000000000000000000000000000000000014000d00200100000000000000000000000000000c001500000000000000000029ec6a2b982376b20a43aa0c71098becef24695a543f0d2a0ccdf6fb605f634cc9ede5b00514ed"], 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000180)=0x6e) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000480)=0x30) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x2040400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x2, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r5, r4, 0x4, r4}, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000040)) 4m40.555977867s ago: executing program 38 (id=6210): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000120001000000000020000000ac141400000000000000000000000000000000000000000014000d00200100000000000000000000000000000c001500000000000000000029ec6a2b982376b20a43aa0c71098becef24695a543f0d2a0ccdf6fb605f634cc9ede5b00514ed"], 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000180)=0x6e) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000480)=0x30) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x2040400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x2, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r5, r4, 0x4, r4}, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000040)) 12.525178183s ago: executing program 9 (id=7058): syz_open_dev$video4linux(&(0x7f0000000580), 0x101, 0x323c00) syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x932c, 0x80}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) r2 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000180)={0x8, r3}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) getrlimit(0x2, &(0x7f0000000540)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)="b995c6a671fad8d6d0567f437e4e74b9857e39aa9716f3e0", 0x18, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = syz_open_procfs$userns(0x0, &(0x7f0000000300)) setns(r10, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffff, @local, 0xb}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa280600fe80000000000000000000000000000000000fdc0ad6bdc72ed500"/57, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000f907800001e14350000000000000000000000000000008001"], 0x0) r11 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$KEYCTL_MOVE(0x18, r5, r7, r11, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r12, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) 12.111634902s ago: executing program 9 (id=7059): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000002480), 0x0, 0x88101) ioctl$HIDIOCGUSAGE(r2, 0x40184810, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c840) close_range(r4, r3, 0x0) 11.90395931s ago: executing program 0 (id=7062): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @null}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000f1401000000000000000000080003000100006ad851204d303113e41e8830969b1230f8b49d19a84a9472627300000800010000000000"], 0x2c}}, 0x0) 10.252200877s ago: executing program 1 (id=7064): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="9f023c34c463eb73b0f3a38ef514ffbdaa7330f7f3958652899afe54d0e8acca891d4a9d1627a7e22aa9800ea73afcffff1a08c1023b20e20b0bb00aeca2febdb28c04c6f84ba1cb9d472862c311e861336aa82e576125144c243d6da23fd06cd17e2afaef744819cb75688a80c5944ed10a5dbd323518ca246ac533f55548192356bdf71416c0cbd5addf09fb2be275992bc234a6b28e5558f7ec7b1bd413062f6060c1e7d049", @ANYRESHEX=r2, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000340), 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = dup3(r3, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000300)={0x200f}) 10.251159946s ago: executing program 3 (id=7065): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000200), 0x2000000000008001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r6], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r7], &(0x7f0000000100), 0x0, 0x80}) r8 = dup(r3) r9 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r9, 0x200004) read$FUSE(r8, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r8, r9, 0x0, 0x80001d00c0d1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8001, '\x00', 0x0, r1, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x902, 0x12) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000130700"/20, @ANYRES32, @ANYBLOB="0067516e65766500001400028008000200e0000002080001000300000008002c0005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008030}, 0x2000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 10.223087298s ago: executing program 0 (id=7066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f00000025c0)=[@text32={0x20, &(0x7f0000000000)="66ba4300edc4e37bf0f900366726640f01c2c4c3f9dfc84466b883000f00d0b90d040000b800080000ba000000000f3066b8f6008ee0260f4522a59a5f6600000600", 0x42}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000540)={{0x2, 0x0, 0x80, {0xddcdb004, 0xeeef0000, 0x1}}, "31f2ff41f3fe4913b175b15ab9b71eb76e738d8695d54edd6860b3a56687181122b945cc0cc0ce5d49154729a17983ea3420f1926f94c450aedcf1770611450bd471e17360dd4fc7f7d0cf9e00a20f77b3ba6490afaa7d014b4002f8d3e741beafaf8334b1d3522f926835f07d583b93bf2852f1e55433e71f4defdbd7609d70be9ce3e9d6618f99ac9772caa1de053de4f42a51ce4ac8afb1613d5ed8a9fbf9240906a836363db04da2c58b294cff2ebc09b773afcee4575f611aaae4cf6bfdad09b21f7b3ba2d501eea1561638771b1c876e66efb70a52923f79fee3ce4d5993238db2999efedc353c88faf5f4c7908c3e5f3d02afc8223a1bf129d90b1b4e7071e4dada94e757f32f98086b3ab4300ef1d19d1e31b3204c43ae5ef9185f2e0865f8ca347513f6d669f7a9debc07af740804e2845803c6dc56d7db446b77c501b4fd1202ba3f4423a4407d2ceef8e71132cb1f95f73f97227e7a7cd8863ded1a308e33eeeff296c93a46270a19c40f8a0f1f958ee0e0b1a3f4d199a8e57a58eab99239480b4a09a07d938e3cda1b23be71d90d964346dcf0c12d8bdac3c0ab209f5faa323a7d1776c8d69d579053a828a4be75688d659847f8863df6bb0df681f3552398d8deed3dd19ac69d86c5e8215b94290aa078f0e395d7d533216840feebabc9470cb5cb21d39a44aa928ea24be9802139e3241fcfea7bc53d79ce9ac964fca5d351c78e67e91beda6a3a54787bfdfc6006351a8c8ee2a0ccc8fd9e559ed747a86de560ffd8d5375b345f8f74e0abd6fde54c863cccfdab56604e5fceab317e64c9ccd89a6e290f4198fe453b7419ea80b99c4856673a8e3ecb4a529d91073be1dde0bf10dd4d83433f63dac60a7b623083ccc5af77ddfacae232ae7c9cfdb2c555d3d2ac7ea1d73122ccfaf79db4b02ce0c5bf8e592f4999f82e5ef959fe43aebe60b3dadbf5f2e2eea3b736584300e54b03bc85778c0aa84994f0357abd86f48babdf7017de90495324ecc1ed4e53b78ccbffe3a2dac71263af7848504456a8a9a3a2588556078b4395e4d35283d791410bb662c5f3173eea58bb3ac5192b658779371c29475a5123ca88aa480d7ab73b8a827ef8294ffbd12a153513ade5a01a23853976944404443aaf66cc75464319030e94e768b3643009e8c1adbbd570edc30fda054c9d0aa2e95713b49f1199514bf08a4980c6a0035dd54c49c1b783cf2f1b8b4fe7b141da1e5b41aabad92f0d1ff5734bb32d24c932546115972ea981c33a3c3ef26be69b5d29eefcdb25f8459241a819ec562de8af2d06376ed4dbc0d517e9d250f21889869f62261bf79322a7e2ebb283b37b46cd755a4f3b71efd474604039e9fcbc349a8d9127740674f296c60ecd31691e9108a3885b10d2d47c2d55f7bcdbbe94c415eb6f55f11dbadd0772ae7b6e13b3b74e47eed94d26fb39128312f03fc8903424eb3576ac6fa44bd10db6a49d16c601f33297df9a3708352a5e6f88948318683fbc3aee563e9fb7a931ce96f3f7762ad84a9e118919b70e75b51bce8bb35c9d1a3ea759bfdf63a32fc00e71b19064a78c95ed638efc46b5da327f1bf86b30da57c6513a3621bdb8e9bb9a6df0a47a3f7863ea28f25337047e1fce48730e518458b7351cfc8513f6180ff729ea48dc34fb2bc5207b4fffc52e2cbfd1193dff2c3dda912011ef8e78193b7f14609fbd62dc143079520dd583e1b8b02945c6f2ef21838fd5a17c05bcaa13e81e34b4eeeed3072a8eea496c48d53344b0a4729beb8c00313d1b3db39a2bbbbf270675b6b3231f356da9afcc2b80e24ea47e4102576e849021da32720ef5a7faaefae81225345a65f2fd90fb502b51258534d679faeec52fd62351b3d4351df13a4fb6f6b7d0881c7f34fee8336a01b7249e7f3b1c0fab9d11e91a5ac2b4d88b0ee5baadb54854f3b0852556dcea4bf945dc02c43f2026ddeade3637c138492aa85bf44c5aff8ce9ff1fe63be14e13223eb204f8b4dedf306f6f357c4a0302f7370be74e6b7d1a64e0e26d72e705e20533c6f4ebc58c0ee0643214913bc5a8664097b9414d017a2452e7a5bebd83a47b56d5a279dbce1dceeb42810ae57964f473467a90353382a917045b0dd8e6e652da8a1b404c08c203f5b4e28efe9a8d4d3106d26b3b189237a001f6fe98b2159e00192f0f3d42853541554cd2640e7ca4d267f997dfccc8c3dba3ca16e66f35d1e4abb71cacb2c581da09729382262a1e56fe5367829e672030a907cde12a3cdadcf8d47b1c934fee1d9cffdbffb6087d154842367953fe84ea38e4436d45d7c8cad785fec2908dcb9020397137da90e0866ca204c761b8067821e67b522fa7c1cf3b745c8c072a7b303daf9de5130caa1626382fc0ff6ce0b9792643e20f2ed182ea687458aa147414b04610a2a70463c6d42b9c685b79726f6088ca6b6e44c46ebbc893a90352b46a74956e98692e027c0b5fd1e23fb846c13e8995790547bd7781a7fee8ec689f959c184115d8ee004d1366404b77ddf27f35a4a7bd2b4a5e667ef5fe9915b9c2599f906f17c42139fe9fd681db51730e974f2ac0b42cbe95eaa96ad8b9634c9e7557b986c0fa475406998a95ffb3dd546c1375bb78b56aeac2d98a3ef382df943b6e6ca1f99ce953d152bf879e2bd8ad87bd691b6cd1f4bceb664a99a4fdf4205f2cbae339054086c3a2e9ab232d0680c9312b899c88f026255ce69cf38c919e39c9e5baa06010d20176223c3d0423a9a03f15e307e6da31489551443f7c8c8ed9c3c3e8f8ba9a3db74d982dccad9dd4f93a1722fafea04a4fc9986acc9f296450959859f2a498ed2052f8239325fd41d440b086acab9b5cc470f404b0b16017a5f6aad3a88bfc7eb96ec0136bf3415972031eff4707ee11d7320f2bdc5a58422483d6e07d65818af61fb032f0133a0ca9ff4e5df2bc3f880fa119a25ff9206e41284a104a291131ec5539900c3c0c63a2c055826da75d21ee11e9d6aeb1b7d3095ea27455f602abe19534c55795ca8fa6226cf5540f2ae97d0051fcda236119f2d49fdd29d986d714d4fe2a667dc1cfc4293391527ed735228abf866df8aed08a3bc4adbfc6a7572478c4692b5aacc2473197d6e4dd3aeddae5f13edf7ce23146a00b15990063ef799adbda982df166c7be17313ed08355053d4c5ace5a793df522bb4f0d9bdf26b6e1de5fdc849591863710ea799a76581894af743abd912d8f73eea599b955b1830ca0b4f42da22990cc3a9cd2c75d8f6921e328bd80676609c813b1a64b7ba4f5f2ce777755ccb7a2bd5e325eb229f036ceb3594652c794814f5de6b710cebb936f82fbe2083fe19ccabdc31581d698b39454128c64dba20fbb117b6b4bb79a355462254e8cb43708bdf66f9f9044691ae783dddb0158141f469174b98549298943922d4e5d2208692d9553f9d87f61708fada78db31c47277da0049ba9d2ddcebd10bf3a3b4d1af3fff73d632aa16a20aeb7b7fc0afed820a3d38163ce311c408a7d8f6aa82a79feafbb67f79dcd5f55c43480d89c4e5093729150368f5756f7eee87f77c4db326f20bc47d7fdc20473ad7ec1ec6e12df6b7bf1b15a9a7c77de4ad0ec885e67416c9566e69c63ea9e56d440d03180bc7bfd54b533476cf514dcf15fafc65b5560a020eb1ea05695bb7e9e5d9b06a0ba1d4d3b0750e6e79f5a533ef2468f3394abe541c60a92527d832c876443ad422fe5d8479e564f11f0900783b7c015cdbe5da51eba5883496d8ecc44704e7f96ced8cadf9e73c5112b4a88db2a83e1151df2136d949420f91d58ca92f5e2266ebb7330b33def7d1b1a5bc6ba1fb9e39a16bf077d001dabe8cbb0ffb883cf70f20e5669a6644d2375c692ff65640f5db69aa50a8d9937909eb7ae1c927747b2dbc21d4e8e7cd5417e64e22443ee9afe9a5c1279c713e3df1db489d1b765566826a5657e33ce6c1e7f54e67d4816aa2c89205a00f342e69e8588576dcf89a0597a8fade167bafff6f053643932aee8fe22f7742a0495f413dac1fa52195c1dfa4f895a935b6ff8aa8f7d5cad4cfe3a1fac4240546e2580fb6d4fb7ff02b32d042061141fd3f75fc3e813f08fdd4c68614f7bb0a212d4712dac9159c1eaac75408d23c815b8d060a3feee53819abbf7944c4e71861911fd25ff1162194c3470d6b8b99f4171445bb4efa4a0b85d8ed7ea5640584dee76436143b3ddf02adc9c2ebf3c166a18f86b696382f11561edd24c253917146005f3ed77eee18a83333f00b5daa9ebabf242ccd9c830f1aecfc5a4e4e42b3ae3e276bdb0efe561d1fb7c4e0ad1738029cbaf8da1fb8346f266af81b531a96565713196bfe98585250002b52b6150fde484b6b4dfa1c8d1db5ef45873e48e5dacdfa29db44fa9286db377754c738ae6cb64cc737b21c9d93a98c3d2d571f87b4fa337f67c83f0fa1c1eda98227bbdbc462f701b67d51df2cfef3b7b7b71ddb986ba83c3be866ad4d0ad7de92dcb690567562bee22b17e5b118a62c095edc3e900d770b749ba5cf1ef25b2a84e599bbc9d6a08e4c54964a10b82b3b47b549ee1078be6ae2272d1382c913c2a0a3c28afec44c55551e3bb51a7eae269dd0cd12524717ba4c6f24f3585a06d691afdf3f6a2d3db1518c267bca51724441eb7ee177030234bda2292d3e790e624505814ee68d35f81d81cb69f719bdf0664c9e8f0903777984962eb3bcab1e7a1901b9b4fd9b2a4a75d52e8faf9345db94fc06bde972c25557c7dbe6b592301c01a91330cca821121029673fd06f8b211d15efd41faaf33ea27f503714e9100fa883af03c49bbb1b74b53013900c63b63b88c8cb10f3cce0593bf42dd7c7038a60b1953357476b1841712bfad73c9aba0d091e56dab6b6a06a02d0397a72f84a259f0812f58f97200249657a9e019356eea9eadf9d21e6566247d4867542896e4259f7462d8574fcec22302ae8485028b95caee4b845d7271f6bba595fe1d2b7f8da52299f595257a932a73e9f18d34a9b78c841d08a009ca367adba3f125fdecfdbdf96f6bcbf502e08aeae062cf8b4c74b8960364bc34a335a60cd16c1dba9e427b2401f8fb90eb1b4a785d299cfe0cdab7200b55cd901c864edd6c2e38350393f9ac17d0e9e8ff1dbd7f6d2b1ec7f6b445dc26ff414fd200e7f855e87346ccf354ef271daa3cd5d5bb3bf5e7fe12b62c219065ad7b4271a0d0e83639037b56c5098a7135b5e19da76c911e3c60c8bc9a89670015270465d3c03b1d60fb3ee8245b88b0c267ded5387a064e207b026a24526bc0c290efee94258063b8caa167ea984af4195229cd4b427008568fa41255f358fb2d6c2afe553cf7d34bf27e2046fec055a1b04b95236516b72060edc16d519e3361764c6f24f01c630fa42582f3433911871184cf139b1be736a4da69419caef0eb427a2785c1b307719ef99588ad5872483a019686f0f7a4bc5e7787ab23a0588364a067dd6a800dfd870618faceadd2df20e2b8eefdfb8283528c53bb72012c580425c321a08166fe1143285ec92444fa4ec317eec77779e1c789bb86dc557f5e95328648c0e706a7cf9fb2c1c7716a184222afc489cbd16a96ccbb2730e811ad5b0b6e1b65c7ea314e30d35dcd9631823648070c57bd3216130d103711ad7360065206da3bfb44df21658a95248ea58c74583b41a55e9139f42e69e477495a20e757cd8c8e2ffc788f35bf2bb928cd71dee0421114da7b9cf7a35eb23c6c6bb10bb6fbb2370ccde6a51337b1ee70f73ce38670f57c9a0c7c45131011a14", "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"}) (async) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0xa, 0x2, 0xdb}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000002600)={r1, 0x4, 0x80000000, 0x2}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) (async) mount$fuse(0x0, 0x0, 0x0, 0x1489c, 0x0) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0b0000000600000004000000a703000001000000", @ANYRES32, @ANYBLOB="0000000000000000000400461800000000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000100"/28], 0x48) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r7, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x44) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x14, r8, 0x20, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x890) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.040655108s ago: executing program 1 (id=7067): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='ex:') r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$get_security(0x11, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0) syz_emit_ethernet(0x96, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r5, 0x8925, 0xffffffffffff7ffe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) timer_create(0xb, 0x0, &(0x7f0000001000)=0x0) timer_settime(r6, 0x0, &(0x7f0000001040)={{}, {0x77359400}}, 0x0) timer_gettime(r6, &(0x7f00000000c0)) 9.977918038s ago: executing program 1 (id=7068): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc028aa03, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x22, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @null}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000f1401000000000000000000080003000100006ad851204d303113e41e8830969b1230f8b49d19a84a9472627300000800010000000000"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002c00010324bd7002f9dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) 9.747854659s ago: executing program 0 (id=7069): keyctl$instantiate(0xc, 0x0, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz2\xc3O6\x91\x93\xf00\x83\x1c\xac\x19\xa8\xffj\x8b\xc2\xeb\xd9\x8f\xbf40\x1f\xde\x1e\xcd\x18L\x0eC\xd7\xafe\x81?\r\xf1\x0e\x8e5fC?\xfa+#\xe7\xb6\x1f\xde!\xf1\x97\xd5@N\xb4\xee(\xa3\x1a\xe5\xc2\x83\xf6\x18U\x86\xea\xc7\xccR\x11\xf9\xa7f\xca\x93\x17\x85\x96\xb3c\xdc\xc4\xdcz\xeb\xd0\x14\x92\x13\x8dg\x11\xa0\xbe\xa2Xj\x97\x83\xeby\xa4;S\x04\xc7\xd37\xd24\x98@\x8cD\x92', 0x20, 0x100ff9}, 0xa1, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='ex:') r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$get_security(0x11, r0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, 0x0, 0x0) syz_emit_ethernet(0x96, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r4, 0x8925, 0xffffffffffff7ffe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) timer_create(0xb, 0x0, &(0x7f0000001000)=0x0) timer_settime(r5, 0x0, &(0x7f0000001040)={{}, {0x77359400}}, 0x0) timer_gettime(r5, &(0x7f00000000c0)) 8.59935583s ago: executing program 3 (id=7072): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x11, 0xffffffffffffffff, 0x3c0e000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x3) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}]}) chown(0x0, 0xee00, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x2010, r5, 0x60ddf000) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) 7.297329267s ago: executing program 4 (id=7073): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="51a18500973b0800007700760000000000000027000000000000009500400000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11000, 0x3, &(0x7f000059e000/0x11000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r8, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) sendmsg(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1, 0x0, 0x0, 0xa4}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000d00000000001000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x9, 0x0, @void, @value}, 0x28) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_emit_ethernet(0x71, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045ec0063000012b7ad62625cef63e6ef3fe8000000000000004e204e299fcda6f3da73e4c364482f2e79e32ff1aeeb98dfdaba46b22f6d01f615e3ae4cb9762b25b571669d00dd5674aaad177bda516a6f66f038cd6ac7b6e405029bba091c7de1fe1bc7a82014521ecb8d9a0ef2dfe0ad749e4c65d9c5df83df57b68c5df0c1e527bf0e26e57514aa3af12c91d74db393788972dd13a8be04c867e9323d33e6b8dc3a850dbd1a6b2b1afbc7b71ceaf5913b03170d1f1a986f5b7e952d500000000000000022", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0160001907800201d8d53fd95af3d87b33530609cb699258189b246d1d07bf95817d6a9f4e75bd77f7d4cb37e660682c9f56aa4876a708894d8510353370af469dd31"], 0x0) 7.100678303s ago: executing program 9 (id=7074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3a6}, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={'xxhash64\x00'}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r7}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @loopback, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x2, 0xffffffff}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.513485754s ago: executing program 3 (id=7075): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x22, 0x4) 5.767938644s ago: executing program 3 (id=7076): syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2000000000000086, &(0x7f000001f1c0)}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='gfs2meta\x00', 0x0, 0x0) chdir(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) mkdir(0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x181000, 0x0) munlock(&(0x7f00003e5000/0x1000)=nil, 0x1000) 5.702905303s ago: executing program 4 (id=7077): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @null}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000f1401000000000000000000080003000100006ad851204d303113e41e8830969b1230f8b49d19a84a9472627300000800010000000000"], 0x2c}}, 0x0) 5.680504729s ago: executing program 9 (id=7078): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='ex:') r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$get_security(0x11, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0) syz_emit_ethernet(0x96, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r5, 0x8925, 0xffffffffffff7ffe) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) timer_create(0xb, 0x0, &(0x7f0000001000)=0x0) timer_settime(r6, 0x0, &(0x7f0000001040)={{}, {0x77359400}}, 0x0) timer_gettime(r6, &(0x7f00000000c0)) 5.500569526s ago: executing program 1 (id=7079): add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket(0x2, 0x80805, 0x0) r0 = io_uring_setup(0x5853, &(0x7f0000000240)={0x0, 0xb3e6, 0x200, 0x1, 0x2a6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x30, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$cec(0x0, 0x0, 0x82000) syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) 4.703233366s ago: executing program 4 (id=7080): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22080}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x401}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22080}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x401}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x4000010d, &(0x7f0000000300)={0x0, 0x59fc, 0x80, 0x2000000, 0x89}, &(0x7f0000000240), &(0x7f0000000100)) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "0000001aca0000000000000200000000000000000000000000008879e66485201a0015ca83740000000000000900"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="b0000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00230000000000000000000000000000000000000000000000000000080000000000000067726f75705f6964a52ddf16d322037f6e25ba1f954d972cd2db5a04c5f18fd0a94f54f4b567093ac6e294c7065144646451a7542e4f4c59fbc67ae6e7a1dd5e66b5bfe5f218e62bbeba7d8d8f2e2cc7a086d4397b7bcbae84d0b0c0b837ec1847b7b15c122a48f63b57bdf73df2d0a79b1d7dd0f55f35a0d9b0db745c9ab849921399d6044070bc932e4d9cc7f00d681ff1bdcc38abd4908c60a4542236aebefecc5e252b2d1c26f8274a92a577e28d476b0fd32e294526eee7ebf91a3ebec6c653672fc6754eb9aeb2e3d19744d8fccdabc219ee4a88540c6c560067f3717555f20fce72c11167082a91b968bb88b8b4aae5a59797b3dab023736d5d7e3b45c0ce7eb0c75e4d"], 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r6, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="b0000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 4.66022169s ago: executing program 0 (id=7081): syz_open_dev$video4linux(&(0x7f0000000580), 0x101, 0x323c00) syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x932c, 0x80}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) r2 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000180)={0x8, r3}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) getrlimit(0x2, &(0x7f0000000540)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)="b995c6a671fad8d6d0567f437e4e74b9857e39aa9716f3e0", 0x18, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = syz_open_procfs$userns(0x0, &(0x7f0000000300)) setns(r10, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffff, @local, 0xb}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa280600fe80000000000000000000000000000000000fdc0ad6bdc72ed500"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000f907800001e14350000000000000000000000000000008001"], 0x0) r11 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$KEYCTL_MOVE(0x18, r5, r7, r11, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r12, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) 4.207843577s ago: executing program 4 (id=7082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069200b10000000000000000000000000000000000810010001000000"], 0x20}}, 0x4000000) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) 3.751615127s ago: executing program 0 (id=7083): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000007d0000000000000a30000000060a0b04000000000000000002000000040004800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a196d1ea31d2b56e966c0ba1ae1b7bd5ae6c6d5dbbca5690012a812d33712179b3c6a62ce443b79b37447b9702fbcc7bc3cd136afc51a295f"], 0x58}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000380)={0x8, [0xfdaf, 0x1f69, 0x82, 0x4, 0xffd0, 0x2, 0xd, 0x8, 0x8, 0x7, 0x80, 0x8, 0x2, 0x6, 0xbcc4, 0x1f58, 0xb, 0x9, 0x7fff, 0x80, 0x101, 0x1, 0x7159, 0x8001, 0x1, 0x8000, 0x8, 0x9, 0x2d, 0x100, 0xbd, 0x3, 0xfff8, 0x7, 0x9578, 0x0, 0xff, 0xffff, 0x2, 0x1ff, 0xfffd, 0xfffc, 0x4, 0x4, 0xfedd, 0x9, 0x8, 0x7], 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xc}, 0x18) socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='tbans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=loose,cache=none,k']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 2.875201963s ago: executing program 4 (id=7084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) (async) 2.66476539s ago: executing program 4 (id=7085): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb1000000080086dd4803", 0x64a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x7ff, 0x0, 0x0, 0x7fff0003}]}) setreuid(0x0, 0xee01) fchdir(r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000055003d0902000000fccbdf2507000000", @ANYRES32=r8, @ANYRESHEX=r1, @ANYRES32=r8, @ANYBLOB="ce6e697de6c8cd"], 0x84}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = syz_usb_connect(0x2, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="120100000e6bf808b0070600a840010203010902240001000030000904510602b6747f0609050103000209050709050b1008099a010798f31df16f9b5be8521d50b703ad5df4f51450ac4bbe25310eeb21e35bad1d280fbc65f5b36d68c475ddc196af6d97d9ed0cc4dc1d606f05d5754b9205edb2baf7c554a13466b2d1a1dfc38bfecce3c51c4d72749def4cd187628a8423899cfc67093b16e00e92649490dda43d494f1f178658408a6283cb6ef5c2610c0b4024c06b6b5960cd1f7acce99e7ee8caddf58d832da5fd347b2e97994b864fba09465bd078af0d85fa36f028a169e1c5406dfb"], 0x0) syz_usb_control_io(r10, &(0x7f0000000240)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="40092100000025fa0ac464ed7b7a45b8133c1e56d3a3ce55e58e3dde4448b5455df250f00000009205aeda73cf9ef2c9da969d47d0c4be28c52cffc654e1ff4a22db8539afd559e010e8d003fd94477945d085ba99bd645d0ef74f0d328ce7c500b5d023d17475d2a974b15598566c13b72180d26481ef385e1242fef407d3c61d4ea5b80b08f22889d0bc"], &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000000a00)=ANY=[@ANYBLOB="0400286ab34c3ad3000f05000000052c050000"], &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xc, 0x4, "d95d07b7", "fb196582"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x3, 0x9, 0xff, 0x6, 0x200, 0xc}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x0, 0x33, 0x7d, "0fa0e04d7c11b6fa3de77063c91f4f618f2a5f4e6974f1acd21860c188a0325a13223ebba155d077f18bfbcb2b0470cab18f998a7be2e9cabfe2ce040c9aa915b062381ee1c4d74886ce8503fb457707cbfb3f5fc1b9364e75a070a8f98b5ed5d3d848acf85876208d15782b45bb1af4edb24a156e5531fb9eac46e92c"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xc0}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x40, 0x40}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x486}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x59}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "cb93"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1000}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="d19c7a1ec73b"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "8954"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x9}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000007c0)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000800)={0xc, r11}) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x19, r14, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0xfffffffffffffd18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x34}}, 0x20040804) sendfile(r9, r12, 0x0, 0x0) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 2.171785622s ago: executing program 1 (id=7086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000008000000000009500000000000400"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180131308655dfae35a581462261d32300000800f9e55ce517c1c29bba9c8a0323dc4f9f000000000f0003400000850000006d00000095dc43a6e016dd58354680519130519ac8b53aa3afff27718d8089", @ANYBLOB="95e086c601ee8ad0ebab9ce289806cac9a49070306c8868fa566054162b9f54ac26045bc64076e51169cdac8afce26cf494bdfa53329acd24ca475d400ffbfb4da7c25a4986e2a44c9", @ANYRESDEC=r0, @ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f00000002c0)={@hyper}) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async, rerun: 64) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) (async, rerun: 64) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f00000001c0)={0x6}) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f0000000040)={@local, 0x308b}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0x0, 0x1f, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010106}, [0xffffff00, 0x0, 0xff000000, 0xffffff00], [], 'ip6gretap0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0xa, 0x1}}}, {{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'geneve1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x1, 0xa}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x5}}, @common=@ipv6header={{0x28}, {0xa5, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xd1a}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async, rerun: 64) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) (async) syz_io_uring_setup(0x1a9f, 0x0, 0x0, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x40) (rerun: 32) 2.101787958s ago: executing program 1 (id=7087): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/231, 0xe7}], 0x2, 0xfffffffb, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0xc048aeca, &(0x7f0000000340)) 2.045565532s ago: executing program 0 (id=7088): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0xffffffffffffffb2, &(0x7f0000000140)={0x0, 0x5, 0x5, "4c7ad6d9c1f7804ccb5a495b34e7dd51ea2fba969a2b964fa0408d4020d6e59dff27640d9c4bf66d416a5726944243bbb5c114bb7e888edefddf55696df31cef70aa5999da3132b4044c5f62801e03b6c68608d368197dddb536689e7d3d2c95d3fbbd90cb48fc178765b1f046ae8fd063b82352b7210c0ace2d442b64ab2f8140085b7251b196fa3f3eba4bcbbab0eb35ca746219ebcd7f8a7626a44356a4a14cf9cf8cdf"}, 0x0, 0x0}) 1.97540321s ago: executing program 9 (id=7089): socket$inet_dccp(0x2, 0x6, 0x0) mkdir(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x100000b, @empty, 0x4000000}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x111) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) acct(&(0x7f0000000300)='./file0/bus\x00') pread64(r5, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.019802588s ago: executing program 3 (id=7090): socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @null}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000f1401000000000000000000080003000100006ad851204d303113e41e8830969b1230f8b49d19a84a9472627300000800010000000000"], 0x2c}}, 0x0) 958.301908ms ago: executing program 9 (id=7091): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x1, 0x3, 0x6, @mcast2, @private0, 0x80, 0x20, 0x0, 0x6}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x2000000000008001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r7], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r8], &(0x7f0000000100), 0x0, 0x80}) r9 = dup(r4) r10 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r10, 0x200004) read$FUSE(r9, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r9, r10, 0x0, 0x80001d00c0d1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8001, '\x00', 0x0, r2, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x902, 0x12) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000130700"/20, @ANYRES32=r1, @ANYBLOB="0067516e65766500001400028008000200e0000002080001000300000008002c0005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008030}, 0x2000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 0s ago: executing program 3 (id=7092): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0xbfd1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000100)="06ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev, 0x9}, 0x1c) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000140)=0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r5 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) kernel console output (not intermixed with test programs): warn_alloc+0x24d/0x3a0 [ 1469.990909][T27836] ? __pfx_warn_alloc+0x10/0x10 [ 1469.990936][T27836] ? __get_vm_area_node+0x1b0/0x2f0 [ 1469.990958][T27836] ? __get_vm_area_node+0x1dc/0x2f0 [ 1469.990986][T27836] __vmalloc_node_range_noprof+0x1102/0x1530 [ 1469.991018][T27836] ? xp_create_and_assign_umem+0x1be/0xe20 [ 1469.991051][T27836] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1469.991075][T27836] ? rcu_is_watching+0x12/0xc0 [ 1469.991094][T27836] ? trace_kmalloc+0x2d/0xd0 [ 1469.991114][T27836] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 1469.991131][T27836] ? xp_create_and_assign_umem+0x1be/0xe20 [ 1469.991158][T27836] __kvmalloc_node_noprof+0x14f/0x1a0 [ 1469.991185][T27836] ? xp_create_and_assign_umem+0x1be/0xe20 [ 1469.991212][T27836] xp_create_and_assign_umem+0x1be/0xe20 [ 1469.991241][T27836] ? lock_acquire+0x2f/0xb0 [ 1469.991264][T27836] ? dev_get_by_index+0x37/0x380 [ 1469.991289][T27836] xsk_bind+0x45a/0x13c0 [ 1469.991314][T27836] ? __pfx_xsk_bind+0x10/0x10 [ 1469.991340][T27836] __sys_bind+0x213/0x260 [ 1469.991357][T27836] ? __pfx___sys_bind+0x10/0x10 [ 1469.991372][T27836] ? do_user_addr_fault+0xe50/0x13f0 [ 1469.991403][T27836] ? xfd_validate_state+0x5d/0x180 [ 1469.991429][T27836] __x64_sys_bind+0x72/0xb0 [ 1469.991443][T27836] ? lockdep_hardirqs_on+0x7c/0x110 [ 1469.991469][T27836] do_syscall_64+0xcd/0x250 [ 1469.991487][T27836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.991510][T27836] RIP: 0033:0x7f5f5618cda9 [ 1469.991526][T27836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1469.991542][T27836] RSP: 002b:00007f5f56faa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1469.991565][T27836] RAX: ffffffffffffffda RBX: 00007f5f563a6160 RCX: 00007f5f5618cda9 [ 1469.991576][T27836] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000005 [ 1469.991587][T27836] RBP: 00007f5f5620e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1469.991597][T27836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1469.991607][T27836] R13: 0000000000000001 R14: 00007f5f563a6160 R15: 00007fff0ee1ed88 [ 1469.991630][T27836] [ 1469.993142][T27836] Mem-Info: [ 1469.994948][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1470.008955][T27836] active_anon:7657 inactive_anon:3 isolated_anon:0 [ 1470.008955][T27836] active_file:19505 inactive_file:3095 isolated_file:0 [ 1470.008955][T27836] unevictable:768 dirty:215 writeback:0 [ 1470.008955][T27836] slab_reclaimable:11759 slab_unreclaimable:143985 [ 1470.008955][T27836] mapped:36007 shmem:4320 pagetables:891 [ 1470.008955][T27836] sec_pagetables:0 bounce:0 [ 1470.008955][T27836] kernel_misc_reclaimable:0 [ 1470.008955][T27836] free:1261126 free_pcp:14579 free_cma:0 [ 1470.057726][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1470.075819][T27836] Node 0 active_anon:30628kB inactive_anon:12kB active_file:78020kB inactive_file:12372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144024kB dirty:856kB writeback:0kB shmem:15744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13172kB pagetables:3664kB sec_pagetables:0kB all_unreclaimable? no [ 1470.165622][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1470.348522][T27836] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1470.379230][T27836] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.473350][T27854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6393'. [ 1471.127186][T27836] lowmem_reserve[]: 0 2487 2487 0 0 [ 1471.130690][T27852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=27852 comm=syz.1.6394 [ 1471.151731][T27820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.160266][T27820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.168177][T27836] Node 0 DMA32 free:1134080kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19128kB inactive_anon:12kB active_file:78008kB inactive_file:12284kB unevictable:1536kB writepending:956kB present:3129332kB managed:2547472kB mlocked:0kB bounce:0kB free_pcp:57684kB local_pcp:32464kB free_cma:0kB [ 1471.199757][T27836] lowmem_reserve[]: 0 0 0 0 0 [ 1471.205212][T27836] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1471.233310][T27836] lowmem_reserve[]: 0 0 0 0 0 [ 1471.238197][T27836] Node 1 Normal free:3907264kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1471.238272][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 147 [ 1471.277183][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1471.296949][T27836] lowmem_reserve[]: 0 0 0 0 0 [ 1471.303694][T27836] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1471.316604][T27836] Node 0 DMA32: 1738*4kB (ME) 654*8kB (UME) 599*16kB (ME) 314*32kB (ME) 399*64kB (UME) 300*128kB (UME) 133*256kB (UME) 139*512kB (UM) 91*1024kB (UME) 10*2048kB (ME) 200*4096kB (M) = 1133832kB [ 1471.335821][T27836] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1471.348079][T27836] Node 1 Normal: 206*4kB (UME) 61*8kB (UME) 48*16kB (UE) 167*32kB (UME) 85*64kB (UME) 25*128kB (UME) 10*256kB (UME) 7*512kB (UME) 6*1024kB (UME) 4*2048kB (UE) 945*4096kB (M) = 3907264kB [ 1471.366970][T27836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.376792][T27836] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1471.390841][T27836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.400538][T27836] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1471.410397][T27836] 24073 total pagecache pages [ 1471.415072][T27836] 3 pages in swap cache [ 1471.419712][T27836] Free swap = 124816kB [ 1471.423890][T27836] Total swap = 124996kB [ 1471.428357][T27836] 2097051 pages RAM [ 1471.432163][T27836] 0 pages HighMem/MovableOnly [ 1471.436875][T27836] 428525 pages reserved [ 1471.442258][T27860] syz.0.6395: attempt to access beyond end of device [ 1471.442258][T27860] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1471.465139][T27836] 0 pages cma reserved [ 1471.523631][T27860] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6395'. [ 1471.532889][T27850] gtp0: entered promiscuous mode [ 1471.549303][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1471.549605][T25773] usb 5-1: USB disconnect, device number 92 [ 1471.563102][ T973] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1471.572588][T25773] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1471.605993][T25773] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1471.629603][T25773] quatech2 5-1:0.51: device disconnected [ 1471.738292][ T973] usb 4-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 1471.754874][ T973] usb 4-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 1471.778706][ T973] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1471.787594][ T973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1471.796807][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.804885][ T973] usb 4-1: Product: syz [ 1471.816023][ T973] usb 4-1: Manufacturer: syz [ 1471.824491][ T973] usb 4-1: SerialNumber: syz [ 1472.183642][T27868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6399'. [ 1472.399668][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1472.560588][T25773] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1473.126849][T25773] usb 5-1: Using ep0 maxpacket: 8 [ 1473.139827][T25773] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1473.175909][T25773] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1473.188531][T25773] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1473.200256][T25773] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1473.213944][T25773] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1473.223606][T25773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.332781][T23287] Bluetooth: hci1: Unable to find connection for big 0x00 [ 1473.501155][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1473.541040][T27892] random: crng reseeded on system resumption [ 1473.873254][T25773] usb 5-1: usb_control_msg returned -32 [ 1473.883729][T25773] usbtmc 5-1:16.0: can't read capabilities [ 1473.901993][T25773] usb 5-1: USB disconnect, device number 93 [ 1473.910589][T27893] sp0: Synchronizing with TNC [ 1474.006685][T27891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=27891 comm=syz.0.6405 [ 1474.612615][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1475.121748][ T973] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1475.147593][ T973] usb 4-1: USB disconnect, device number 42 [ 1475.154739][ T973] usblp0: removed [ 1475.457919][T27906] can: request_module (can-proto-0) failed. [ 1475.724533][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1476.836269][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1477.948132][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1478.130706][T27938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1478.261075][T27941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6419'. [ 1479.059921][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1479.060125][T27942] usb usb9: usbfs: process 27942 (syz.3.6420) did not claim interface 7 before use [ 1479.287222][T27950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6423'. [ 1479.676510][T27953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6422'. [ 1479.699057][T27955] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6424'. [ 1479.753072][T27950] bond1 (unregistering): Released all slaves [ 1480.171910][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1480.544827][T27969] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1480.544827][T27969] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1481.216902][T23287] block nbd4: Receive control failed (result -32) [ 1481.223606][T14791] block nbd4: Receive control failed (result -32) [ 1481.294244][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1481.337475][T27966] block nbd4: shutting down sockets [ 1482.395496][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1483.197336][T27994] syz.3.6434: attempt to access beyond end of device [ 1483.197336][T27994] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1483.358290][T28003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6437'. [ 1483.507216][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1484.077589][T16379] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1484.277107][T16379] usb 10-1: Using ep0 maxpacket: 8 [ 1484.286522][T16379] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1484.305659][T16379] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.364199][T16379] usb 10-1: Product: syz [ 1484.394876][T16379] usb 10-1: Manufacturer: syz [ 1484.399570][T16379] usb 10-1: SerialNumber: syz [ 1484.410961][T16379] usb 10-1: config 0 descriptor?? [ 1484.577851][T16379] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1484.619103][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1485.121935][T16379] gspca_sonixj: reg_w1 err -110 [ 1485.143105][T16379] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1485.730854][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1486.009561][T28022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6442'. [ 1486.018613][T28022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6442'. [ 1486.457916][T16379] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1486.651680][T16379] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1486.659975][T16379] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.692341][T16379] usb 4-1: config 0 has no interface number 0 [ 1486.713357][T28042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.713940][T16379] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 228, changing to 11 [ 1486.745610][T28042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.745834][T16379] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41176, setting to 1024 [ 1486.770517][T16379] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1486.796271][T16379] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1486.806482][T16379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.831217][T16379] usb 4-1: config 0 descriptor?? [ 1486.842741][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1486.883002][T16379] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1487.076052][T28016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6441'. [ 1487.119753][T27944] usb 4-1: Failed to submit usb control message: -71 [ 1487.127077][T16379] usb 4-1: USB disconnect, device number 43 [ 1487.146797][T27944] usb 4-1: unable to send the bmi data to the device: -71 [ 1487.186139][T27944] usb 4-1: unable to get target info from device [ 1487.206238][T27944] usb 4-1: could not get target info (-71) [ 1487.246503][T27944] usb 4-1: could not probe fw (-71) [ 1487.965205][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1489.066357][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1489.205928][T16379] usb 10-1: USB disconnect, device number 15 [ 1490.125587][T28081] sp0: Synchronizing with TNC [ 1490.178137][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1491.301132][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1491.648032][T16379] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1491.761671][T28100] netlink: 'syz.3.6460': attribute type 33 has an invalid length. [ 1491.769766][T28095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1491.819532][T28095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1491.853904][T16379] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.873820][T28095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1491.881363][T28095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1491.893247][T16379] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.910222][T16379] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1491.936002][T16379] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1491.950064][T16379] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.962251][T16379] usb 10-1: config 0 descriptor?? [ 1492.051650][T28103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6461'. [ 1492.188565][T23288] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1492.412486][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1493.269070][T23288] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.279767][T23288] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1493.288798][T23288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.298195][T23288] usb 4-1: config 0 descriptor?? [ 1493.307852][T23288] pwc: Askey VC010 type 2 USB webcam detected. [ 1493.513649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1494.625444][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1495.342528][T23288] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1495.466307][T28107] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1495.541169][T23288] pwc: recv_control_msg error -32 req 02 val 2700 [ 1495.564396][T23288] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1495.576440][T28111] lo speed is unknown, defaulting to 1000 [ 1495.582990][T23288] pwc: recv_control_msg error -32 req 04 val 1000 [ 1495.639155][T23288] pwc: recv_control_msg error -32 req 04 val 1300 [ 1495.657136][T28112] syzkaller1: entered promiscuous mode [ 1495.678962][T23288] pwc: recv_control_msg error -32 req 04 val 1400 [ 1495.686912][T28112] syzkaller1: entered allmulticast mode [ 1495.697231][T23288] pwc: recv_control_msg error -32 req 02 val 2000 [ 1495.718980][T23288] pwc: recv_control_msg error -32 req 02 val 2100 [ 1495.737302][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1495.758343][T23288] pwc: recv_control_msg error -32 req 04 val 1500 [ 1495.764939][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1495.764951][ T29] audit: type=1400 audit(2000000486.291:61893): avc: denied { override_creds } for pid=28113 comm="syz.1.6464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1495.823439][T23288] pwc: recv_control_msg error -32 req 02 val 2500 [ 1495.923829][T28111] lo speed is unknown, defaulting to 1000 [ 1496.027556][T23288] pwc: recv_control_msg error -32 req 02 val 2400 [ 1496.066027][T23288] pwc: recv_control_msg error -32 req 02 val 2600 [ 1496.089021][T23288] pwc: recv_control_msg error -32 req 02 val 2900 [ 1496.329341][T23288] pwc: recv_control_msg error -71 req 04 val 1100 [ 1496.350737][T23288] pwc: recv_control_msg error -71 req 04 val 1200 [ 1496.374355][T23288] pwc: Registered as video103. [ 1496.434031][T23288] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input167 [ 1496.482884][T23288] usb 4-1: USB disconnect, device number 44 [ 1496.849083][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1496.870563][T25772] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1497.649005][T16379] usbhid 10-1:0.0: can't add hid device: -32 [ 1497.655588][T16379] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 1497.665099][T25772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.971637][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1497.980820][T20524] usb 10-1: USB disconnect, device number 16 [ 1498.001039][T25772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.168522][T25772] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1498.215582][T25772] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1498.219767][T14791] Bluetooth: hci1: unexpected event 0x17 length: 16 > 6 [ 1498.815811][T25772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.999160][T25772] usb 5-1: config 0 descriptor?? [ 1499.072806][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1500.195594][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1500.689114][T28167] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6476'. [ 1500.708068][T28167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6476'. [ 1501.296379][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1502.196470][T25772] usb 5-1: can't set config #0, error -71 [ 1502.216326][T25772] usb 5-1: USB disconnect, device number 94 [ 1502.375691][T28179] netlink: 15 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1502.408232][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1502.684519][T28191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6480'. [ 1503.341110][T28196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6484'. [ 1503.530764][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1503.777468][ T5869] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1503.821682][T28191] hsr_slave_1 (unregistering): left promiscuous mode [ 1503.958366][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 1503.966390][ T5869] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1504.039616][T28204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6485'. [ 1504.624104][ T5869] usb 5-1: config 0 has no interface number 0 [ 1504.631897][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1504.646873][ T5869] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1504.660625][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.668881][ T5869] usb 5-1: Product: syz [ 1504.673321][ T5869] usb 5-1: Manufacturer: syz [ 1504.678425][ T5869] usb 5-1: SerialNumber: syz [ 1504.686659][ T5869] usb 5-1: config 0 descriptor?? [ 1504.695388][ T5869] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1504.857901][T28210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6487'. [ 1504.972677][ T5869] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1504.984304][ T5869] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1505.062664][T28215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6489'. [ 1505.754401][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1506.012015][T28196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.020472][T28196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.069719][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1506.177304][T25772] usb 5-1: USB disconnect, device number 95 [ 1506.194146][T25772] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1506.225098][T25772] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1506.253253][T25772] quatech2 5-1:0.51: device disconnected [ 1506.855756][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1507.429165][T28239] sp0: Synchronizing with TNC [ 1507.978007][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1509.079308][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1510.201656][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1510.240954][T28268] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1511.102453][T28266] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6502'. [ 1511.302852][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1511.527332][ T5869] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1512.286729][ T5869] usb 10-1: Using ep0 maxpacket: 32 [ 1512.315902][ T5869] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1512.341232][ T5869] usb 10-1: config 0 has no interface number 0 [ 1512.374399][ T5869] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1512.414607][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1512.506662][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.543929][ T5869] usb 10-1: Product: syz [ 1512.561920][ T5869] usb 10-1: Manufacturer: syz [ 1512.587118][ T5869] usb 10-1: SerialNumber: syz [ 1513.346294][ T5869] usb 10-1: config 0 descriptor?? [ 1513.377647][ T5869] usb 10-1: can't set config #0, error -71 [ 1513.409906][ T5869] usb 10-1: USB disconnect, device number 17 [ 1513.429423][T28288] syz.3.6506: attempt to access beyond end of device [ 1513.429423][T28288] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1513.476775][T28288] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6506'. [ 1513.526490][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1514.638260][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1515.162965][T28312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1515.760835][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1516.457598][T28324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6518'. [ 1516.861941][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1516.921290][T28318] syzkaller1: entered promiscuous mode [ 1516.934743][T28318] syzkaller1: entered allmulticast mode [ 1517.984564][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1518.754306][T28351] pim6reg1: entered promiscuous mode [ 1518.759656][T28351] pim6reg1: entered allmulticast mode [ 1519.096285][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1520.161694][T28357] sp0: Synchronizing with TNC [ 1520.197422][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1520.711706][T23288] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1521.024404][T28368] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6530'. [ 1521.309205][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1521.407906][T23288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.418544][T23288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1521.492027][T23288] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1521.512687][T23288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1521.632420][T23288] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1521.659961][T23288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.718196][T23288] usb 5-1: Product: syz [ 1521.722372][T23288] usb 5-1: Manufacturer: syz [ 1521.732501][T23288] usb 5-1: SerialNumber: syz [ 1521.743877][T23288] usb 5-1: config 0 descriptor?? [ 1521.750304][T23288] usb 5-1: ucan: probing device on interface #0 [ 1521.757052][T23288] usb 5-1: ucan: invalid endpoint configuration [ 1521.763644][T23288] usb 5-1: ucan: probe failed; try to update the device firmware [ 1522.431949][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1522.744742][T28381] Cannot find set identified by id 0 to match [ 1522.843139][T28363] netlink: 165 bytes leftover after parsing attributes in process `syz.4.6529'. [ 1522.868410][T16379] usb 5-1: USB disconnect, device number 96 [ 1523.195495][T28397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1523.532919][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1523.671823][T14791] Bluetooth: hci5: command 0x0406 tx timeout [ 1523.803452][T28403] syz.9.6536: attempt to access beyond end of device [ 1523.803452][T28403] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1524.019141][T28408] syz.3.6539: attempt to access beyond end of device [ 1524.019141][T28408] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1524.033305][T28408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6539'. [ 1524.065455][T28407] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.6540'. [ 1524.624369][T28416] random: crng reseeded on system resumption [ 1524.655404][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1524.908576][T28415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=28415 comm=syz.0.6542 [ 1525.756551][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1526.652355][T28442] CIFS: Unable to determine destination address [ 1526.880126][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1527.074877][T28447] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6552'. [ 1527.980186][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1528.699625][T23288] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1528.723227][T28454] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1528.723227][T28454] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1528.890996][T28459] block nbd4: Device being setup by another task [ 1528.913594][T28469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6557'. [ 1528.963764][T23288] usb 10-1: Using ep0 maxpacket: 32 [ 1529.091993][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1529.424618][T28466] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1529.424618][T28466] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1529.427448][T23288] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1529.475535][T23288] usb 10-1: config 0 has no interface number 0 [ 1529.480334][T23287] block nbd4: Receive control failed (result -32) [ 1529.511285][T23288] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1529.519983][T28462] block nbd4: shutting down sockets [ 1529.520946][T23288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.534174][T23288] usb 10-1: Product: syz [ 1529.541947][T23288] usb 10-1: Manufacturer: syz [ 1529.546713][T23288] usb 10-1: SerialNumber: syz [ 1529.554063][T23288] usb 10-1: config 0 descriptor?? [ 1529.561031][T23288] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1529.701954][T14791] block nbd0: Receive control failed (result -32) [ 1529.765835][T23287] block nbd0: Receive control failed (result -32) [ 1529.799421][T28463] block nbd0: shutting down sockets [ 1529.823435][T23288] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1529.863054][T23288] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1530.203790][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1530.580758][T28446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.590196][T28446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.675352][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 147 [ 1531.315739][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1531.653396][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1531.662676][T23288] usb 10-1: USB disconnect, device number 18 [ 1531.674141][T23288] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1532.153210][T23288] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1532.220584][T23288] quatech2 10-1:0.51: device disconnected [ 1532.427443][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1532.457577][T28499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6565'. [ 1532.663187][T23288] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1533.105956][T23288] usb 10-1: config 0 has an invalid interface number: 11 but max is 0 [ 1533.122648][T23288] usb 10-1: config 0 has no interface number 0 [ 1533.128841][T23288] usb 10-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1533.142068][T23288] usb 10-1: config 0 interface 11 has no altsetting 0 [ 1533.174264][T23288] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1533.193961][T23288] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.244875][T28506] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1533.244875][T28506] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1533.295272][T23288] usb 10-1: config 0 descriptor?? [ 1533.319509][T28494] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1533.331367][T23288] keyspan 10-1:0.11: Keyspan 2 port adapter converter detected [ 1533.351298][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 81 [ 1533.376939][T28512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1533.384149][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 82 [ 1533.395766][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 1 [ 1533.403624][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 2 [ 1533.416297][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 85 [ 1533.425858][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 5 [ 1533.434551][T23288] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1533.444071][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 83 [ 1533.452824][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 84 [ 1533.460970][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 3 [ 1533.469110][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 4 [ 1533.477558][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 86 [ 1533.487089][T23288] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 6 [ 1533.505928][T23288] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1533.539294][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1533.556055][ T29] audit: type=1326 audit(2000000521.649:61894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28492 comm="syz.9.6566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f5618cda9 code=0x0 [ 1533.646874][T28516] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6571'. [ 1533.851493][T28520] 9pnet_fd: Insufficient options for proto=fd [ 1533.885999][T28520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.974386][T28520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1534.651078][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1535.763053][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1536.135066][T28532] CIFS: Unable to determine destination address [ 1536.874738][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1537.199955][T28542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1537.997296][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1538.010705][T25773] usb 10-1: USB disconnect, device number 19 [ 1538.021855][T25773] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1538.037053][T25773] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1538.069633][T25773] keyspan 10-1:0.11: device disconnected [ 1538.074459][T28555] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1538.074459][T28555] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1538.340433][T28563] random: crng reseeded on system resumption [ 1538.590100][T28560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=28560 comm=syz.9.6584 [ 1538.736531][T28566] syz.3.6583: attempt to access beyond end of device [ 1538.736531][T28566] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1538.823318][T23287] block nbd0: Receive control failed (result -32) [ 1538.829826][T14791] block nbd0: Receive control failed (result -32) [ 1538.836683][T28552] block nbd0: shutting down sockets [ 1538.870067][T28576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28576 comm=syz.4.6586 [ 1538.919924][T28578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6587'. [ 1539.109058][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1539.142149][T28578] bond1 (unregistering): Released all slaves [ 1539.266526][T28576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1539.273848][T28576] IPv6: NLM_F_CREATE should be set when creating new route [ 1539.281107][T28576] IPv6: NLM_F_CREATE should be set when creating new route [ 1540.220924][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1541.332737][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1541.587216][T28610] CIFS: Unable to determine destination address [ 1541.852033][T28613] syz.0.6596: attempt to access beyond end of device [ 1541.852033][T28613] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1541.884585][T28613] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1542.045173][T28615] fuse: Bad value for 'fd' [ 1542.371475][T28618] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1542.371475][T28618] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1542.433939][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1542.986128][T28621] netlink: 763 bytes leftover after parsing attributes in process `syz.3.6600'. [ 1543.076975][T23287] block nbd9: Receive control failed (result -32) [ 1543.076975][T14791] block nbd9: Receive control failed (result -32) [ 1543.081569][T28617] block nbd9: shutting down sockets [ 1543.118342][T25773] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1543.278527][T25773] usb 5-1: Using ep0 maxpacket: 32 [ 1543.281352][T25773] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1543.281376][T25773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.281394][T25773] usb 5-1: Product: syz [ 1543.281409][T25773] usb 5-1: Manufacturer: syz [ 1543.281424][T25773] usb 5-1: SerialNumber: syz [ 1543.282870][T25773] usb 5-1: config 0 descriptor?? [ 1543.284924][T25773] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1543.556368][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1544.530164][T25773] gspca_stk1135: reg_w 0x3 err -71 [ 1544.536936][T25773] gspca_stk1135: serial bus timeout: status=0x00 [ 1544.543811][T25773] gspca_stk1135: Sensor write failed [ 1544.549296][T25773] gspca_stk1135: serial bus timeout: status=0x00 [ 1544.557018][T25773] gspca_stk1135: Sensor write failed [ 1544.562460][T25773] gspca_stk1135: serial bus timeout: status=0x00 [ 1544.568827][T25773] gspca_stk1135: Sensor read failed [ 1544.668471][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1544.689711][T25773] gspca_stk1135: serial bus timeout: status=0x00 [ 1544.699517][T25773] gspca_stk1135: Sensor read failed [ 1544.706488][T25773] gspca_stk1135: Detected sensor type unknown (0x0) [ 1544.721702][T25773] gspca_stk1135: serial bus timeout: status=0x00 [ 1544.736620][T25773] gspca_stk1135: Sensor read failed [ 1544.743795][T25773] gspca_stk1135: serial bus timeout: status=0x00 [ 1544.752988][T25773] gspca_stk1135: Sensor read failed [ 1545.073853][T25773] gspca_stk1135: serial bus timeout: status=0x00 [ 1545.134309][T28651] ptrace attach of "./syz-executor exec"[25734] was attempted by "./syz-executor exec"[28651] [ 1545.152068][T25773] gspca_stk1135: Sensor write failed [ 1545.195501][T25773] gspca_stk1135: serial bus timeout: status=0x00 [ 1545.201868][T25773] gspca_stk1135: Sensor write failed [ 1545.298950][T25773] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1545.470202][T25773] usb 5-1: USB disconnect, device number 97 [ 1545.769326][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1546.392593][T28661] sp0: Synchronizing with TNC [ 1546.494060][T28665] syz_tun: entered allmulticast mode [ 1546.686135][T28671] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1546.686135][T28671] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1546.881184][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1547.353113][T28664] syz_tun: left allmulticast mode [ 1547.396154][T28686] CIFS: Unable to determine destination address [ 1547.546662][T28695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6622'. [ 1547.723552][ T5869] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 1548.003659][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1548.414946][T28709] syz.3.6621: attempt to access beyond end of device [ 1548.414946][T28709] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1548.494080][T28709] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6621'. [ 1548.576697][ T5869] usb 5-1: config 7 has an invalid descriptor of length 219, skipping remainder of the config [ 1548.588927][ T5869] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1548.602791][ T5869] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=77.a1 [ 1548.612069][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.104827][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1549.320876][T23288] usb 5-1: USB disconnect, device number 98 [ 1549.415687][ T5869] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1549.553839][ T5869] usb 4-1: device descriptor read/64, error -71 [ 1549.911303][ T5869] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1550.020677][T28724] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6630'. [ 1550.099113][ T5869] usb 4-1: device descriptor read/64, error -71 [ 1550.216859][ T5869] usb usb4-port1: attempt power cycle [ 1550.227294][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1550.244361][T28731] CIFS: Unable to determine destination address [ 1550.300618][T28733] netlink: 'syz.4.6633': attribute type 3 has an invalid length. [ 1550.580154][ T5869] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1550.612691][ T5869] usb 4-1: device descriptor read/8, error -71 [ 1551.328567][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1551.453774][ T5869] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1551.494157][T28746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6637'. [ 1551.503686][ T5869] usb 4-1: device descriptor read/8, error -71 [ 1551.652571][ T5869] usb usb4-port1: unable to enumerate USB device [ 1552.440375][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1553.267061][T28778] syz.0.6646: attempt to access beyond end of device [ 1553.267061][T28778] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1553.311533][T28778] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6646'. [ 1553.485785][ T29] audit: type=1400 audit(2000000540.292:61895): avc: denied { getattr } for pid=28786 comm="syz.9.6650" path="socket:[124865]" dev="sockfs" ino=124865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1553.562197][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1554.663928][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1554.784093][T28796] xt_CT: No such helper "syz0" [ 1555.367106][T14791] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1555.526840][T28807] nvme_fabrics: missing parameter 'transport=%s' [ 1555.580784][T28807] nvme_fabrics: missing parameter 'nqn=%s' [ 1555.786449][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1556.334777][T23288] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1556.824655][T28824] CIFS: Unable to determine destination address [ 1556.887609][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1556.991982][T23288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.020780][T23288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.124526][T23288] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1557.141628][T23288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.151270][T23288] usb 4-1: config 0 descriptor?? [ 1557.185428][ T29] audit: type=1400 audit(2000000543.753:61896): avc: denied { write } for pid=28830 comm="syz.9.6664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1557.392853][T23288] usbhid 4-1:0.0: can't add hid device: -71 [ 1557.399866][T23288] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1557.410581][T23288] usb 4-1: USB disconnect, device number 49 [ 1557.436587][T28836] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1557.436587][T28836] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1557.837156][T28844] syz.4.6668: attempt to access beyond end of device [ 1557.837156][T28844] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1557.999423][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1558.340278][T23287] block nbd9: Receive control failed (result -32) [ 1558.347998][T14791] block nbd9: Receive control failed (result -32) [ 1558.355495][T28835] block nbd9: shutting down sockets [ 1558.521884][T28851] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6672'. [ 1559.111268][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1559.736429][T28870] syz.9.6678: attempt to access beyond end of device [ 1559.736429][T28870] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1559.780153][T28870] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6678'. [ 1560.223058][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1561.285549][T28899] gtp0: entered promiscuous mode [ 1561.334848][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1561.359647][T28901] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1561.359647][T28901] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1561.434248][T28902] random: crng reseeded on system resumption [ 1562.205235][T14791] block nbd0: Receive control failed (result -32) [ 1562.205405][T23287] block nbd0: Receive control failed (result -32) [ 1562.224247][T28895] block nbd0: shutting down sockets [ 1562.249914][ T29] audit: type=1400 audit(2000000548.476:61897): avc: denied { ioctl } for pid=28897 comm="syz.4.6688" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1562.286592][T28902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=28902 comm=syz.4.6688 [ 1562.446982][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1562.984358][ T29] audit: type=1400 audit(2000000549.178:61898): avc: denied { ioctl } for pid=28921 comm="syz.4.6697" path="socket:[127129]" dev="sockfs" ino=127129 ioctlcmd=0xae78 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1563.086787][T28918] FAULT_INJECTION: forcing a failure. [ 1563.086787][T28918] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1563.109852][T28918] CPU: 1 UID: 0 PID: 28918 Comm: syz.0.6695 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 1563.109872][T28918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1563.109880][T28918] Call Trace: [ 1563.109884][T28918] [ 1563.109889][T28918] dump_stack_lvl+0x16c/0x1f0 [ 1563.109907][T28918] should_fail_ex+0x50a/0x650 [ 1563.109925][T28918] ? __pfx___might_resched+0x10/0x10 [ 1563.109947][T28918] should_fail_alloc_page+0xe7/0x130 [ 1563.109962][T28918] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1563.109984][T28918] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1563.109998][T28918] ? hlock_class+0x4e/0x130 [ 1563.110012][T28918] ? __lock_acquire+0x15a9/0x3c40 [ 1563.110035][T28918] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1563.110049][T28918] ? __pfx___lock_acquire+0x10/0x10 [ 1563.110067][T28918] ? filemap_get_entry+0x1a8/0x3c0 [ 1563.110088][T28918] ? lock_acquire.part.0+0x11b/0x380 [ 1563.110105][T28918] ? find_held_lock+0x2d/0x110 [ 1563.110121][T28918] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1563.110141][T28918] ? policy_nodemask+0xea/0x4e0 [ 1563.110157][T28918] alloc_pages_mpol+0x1fc/0x540 [ 1563.110171][T28918] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1563.110184][T28918] ? _raw_spin_unlock+0x28/0x50 [ 1563.110202][T28918] ? swap_swapcount+0x116/0x180 [ 1563.110215][T28918] ? __pfx_swap_swapcount+0x10/0x10 [ 1563.110231][T28918] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1563.110248][T28918] __read_swap_cache_async+0x50a/0x660 [ 1563.110270][T28918] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1563.110288][T28918] ? swp_swap_info+0xcf/0x130 [ 1563.110302][T28918] ? __pfx_swp_swap_info+0x10/0x10 [ 1563.110321][T28918] swap_cluster_readahead+0x3ec/0x740 [ 1563.110343][T28918] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1563.110363][T28918] ? filemap_get_entry+0x1a8/0x3c0 [ 1563.110389][T28918] ? get_vma_policy+0x248/0x3c0 [ 1563.110405][T28918] swapin_readahead+0x12c/0xd60 [ 1563.110426][T28918] ? __pfx_lock_release+0x10/0x10 [ 1563.110453][T28918] ? __pfx_swapin_readahead+0x10/0x10 [ 1563.110471][T28918] ? __filemap_get_folio+0x333/0xbd0 [ 1563.110493][T28918] ? swap_cache_get_folio+0x1e0/0x460 [ 1563.110512][T28918] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1563.110529][T28918] ? __pfx_get_swap_device+0x10/0x10 [ 1563.110547][T28918] do_swap_page+0x680/0x59c0 [ 1563.110565][T28918] ? rcu_is_watching+0x12/0xc0 [ 1563.110578][T28918] ? trace_lock_acquire+0x14e/0x1f0 [ 1563.110594][T28918] ? lock_acquire+0x2f/0xb0 [ 1563.110609][T28918] ? ___pte_offset_map+0x42/0x540 [ 1563.110627][T28918] ? __pfx_do_swap_page+0x10/0x10 [ 1563.110643][T28918] ? ___pte_offset_map+0x1b9/0x540 [ 1563.110661][T28918] ? __pfx_default_wake_function+0x10/0x10 [ 1563.110683][T28918] ? __pfx_mt_find+0x10/0x10 [ 1563.110699][T28918] __collapse_huge_page_swapin+0x12e/0x680 [ 1563.110718][T28918] ? __pfx___collapse_huge_page_swapin+0x10/0x10 [ 1563.110742][T28918] ? hugepage_vma_revalidate.isra.0+0x2b7/0x570 [ 1563.110756][T28918] ? mm_find_pmd+0x15f/0x1b0 [ 1563.110777][T28918] collapse_huge_page+0x600/0x3170 [ 1563.110800][T28918] ? __pfx_collapse_huge_page+0x10/0x10 [ 1563.110814][T28918] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1563.110832][T28918] ? rcu_is_watching+0x12/0xc0 [ 1563.110845][T28918] ? do_raw_spin_lock+0x12d/0x2c0 [ 1563.110857][T28918] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1563.110869][T28918] ? find_held_lock+0x2d/0x110 [ 1563.110894][T28918] hpage_collapse_scan_pmd+0xb06/0x11c0 [ 1563.110918][T28918] ? __pfx_hpage_collapse_scan_pmd+0x10/0x10 [ 1563.110940][T28918] madvise_collapse+0x6f2/0xb10 [ 1563.110957][T28918] ? mas_prev_slot+0x4cb/0x2000 [ 1563.110970][T28918] ? __pfx_madvise_collapse+0x10/0x10 [ 1563.110987][T28918] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1563.111008][T28918] madvise_vma_behavior+0xbb8/0x1dd0 [ 1563.111026][T28918] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1563.111042][T28918] ? find_vma_prev+0xdb/0x160 [ 1563.111060][T28918] ? __pfx_find_vma_prev+0x10/0x10 [ 1563.111082][T28918] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 1563.111102][T28918] ? do_madvise+0x2b3/0x7c0 [ 1563.111118][T28918] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1563.111132][T28918] madvise_walk_vmas+0x1cf/0x2c0 [ 1563.111148][T28918] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1563.111167][T28918] do_madvise+0x366/0x7c0 [ 1563.111184][T28918] ? __pfx_do_madvise+0x10/0x10 [ 1563.111203][T28918] ? ksys_write+0x1ba/0x250 [ 1563.111221][T28918] ? __pfx_ksys_write+0x10/0x10 [ 1563.111243][T28918] __x64_sys_madvise+0xa9/0x110 [ 1563.111257][T28918] ? lockdep_hardirqs_on+0x7c/0x110 [ 1563.111276][T28918] do_syscall_64+0xcd/0x250 [ 1563.111290][T28918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.111307][T28918] RIP: 0033:0x7fa0d2f8cda9 [ 1563.111317][T28918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1563.111329][T28918] RSP: 002b:00007fa0d3d32038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1563.111342][T28918] RAX: ffffffffffffffda RBX: 00007fa0d31a5fa0 RCX: 00007fa0d2f8cda9 [ 1563.111350][T28918] RDX: 0000000000000019 RSI: 0000000008000000 RDI: 0000000020000000 [ 1563.111358][T28918] RBP: 00007fa0d3d32090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.111365][T28918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1563.111372][T28918] R13: 0000000000000000 R14: 00007fa0d31a5fa0 R15: 00007ffe1e9dc768 [ 1563.111389][T28918] [ 1563.631396][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1563.686803][ T5869] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1563.847408][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 1563.869353][ T5869] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1563.878682][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.898406][ T5869] usb 4-1: Product: syz [ 1563.906289][ T5869] usb 4-1: Manufacturer: syz [ 1563.910900][ T5869] usb 4-1: SerialNumber: syz [ 1563.930224][ T5869] usb 4-1: config 0 descriptor?? [ 1563.941915][ T5869] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1564.122939][T23288] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1564.316593][T23288] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1564.377323][T23288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.492154][T23288] usb 5-1: config 0 has no interface number 0 [ 1564.592422][T23288] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 228, changing to 11 [ 1564.598466][T20524] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1564.636324][T23288] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41176, setting to 1024 [ 1564.683234][T23288] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1564.715532][T23288] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1564.725797][T23288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.737401][T23288] usb 5-1: config 0 descriptor?? [ 1564.746696][T23288] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1564.766941][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1564.838218][T20524] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.900232][T20524] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.929798][T20524] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1564.961886][ T5869] gspca_stk1135: reg_w 0x3 err -110 [ 1564.963732][T20524] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.968485][ T5869] gspca_stk1135: serial bus timeout: status=0x00 [ 1564.982445][T28954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31570 sclass=netlink_route_socket pid=28954 comm=syz.1.6704 [ 1564.996120][ T5869] gspca_stk1135: Sensor write failed [ 1564.996247][ T5869] gspca_stk1135: serial bus timeout: status=0x00 [ 1564.996258][ T5869] gspca_stk1135: Sensor write failed [ 1564.996361][ T5869] gspca_stk1135: serial bus timeout: status=0x00 [ 1564.996371][ T5869] gspca_stk1135: Sensor read failed [ 1564.996402][ T5869] gspca_stk1135: serial bus timeout: status=0x00 [ 1564.996412][ T5869] gspca_stk1135: Sensor read failed [ 1564.996419][ T5869] gspca_stk1135: Detected sensor type unknown (0x0) [ 1564.996651][ T5869] gspca_stk1135: serial bus timeout: status=0x00 [ 1564.996661][ T5869] gspca_stk1135: Sensor read failed [ 1564.996689][ T5869] gspca_stk1135: serial bus timeout: status=0x00 [ 1564.996735][ T5869] gspca_stk1135: Sensor read failed [ 1565.084254][ T5869] gspca_stk1135: serial bus timeout: status=0x00 [ 1565.084272][ T5869] gspca_stk1135: Sensor write failed [ 1565.084299][ T5869] gspca_stk1135: serial bus timeout: status=0x00 [ 1565.084309][ T5869] gspca_stk1135: Sensor write failed [ 1565.084353][ T5869] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 1565.110204][T28930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6699'. [ 1565.152898][T20524] usb 10-1: config 0 descriptor?? [ 1565.167242][T28930] bond1 (unregistering): Released all slaves [ 1565.322795][T25773] usb 4-1: USB disconnect, device number 50 [ 1565.878595][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1565.882429][T23288] usb 5-1: USB disconnect, device number 99 [ 1565.885852][T27943] usb 5-1: Failed to submit usb control message: -71 [ 1565.925060][T27943] usb 5-1: unable to send the bmi data to the device: -71 [ 1565.969526][T27943] usb 5-1: unable to get target info from device [ 1565.991046][T27943] usb 5-1: could not get target info (-71) [ 1566.004022][T20524] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 1566.011770][T27943] usb 5-1: could not probe fw (-71) [ 1566.028053][T20524] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 1566.049385][T20524] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 1566.056797][T20524] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 1566.093323][T20524] playstation 0003:054C:0DF2.0053: unknown main item tag 0x0 [ 1566.102526][T20524] playstation 0003:054C:0DF2.0053: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0 [ 1566.459300][T28980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6712'. [ 1566.619338][T28985] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1566.628785][T28985] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1566.638284][T28985] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1566.830021][T28988] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6714'. [ 1566.979526][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1567.272116][ T29] audit: type=1326 audit(2000000553.191:61899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1567.379911][T20524] playstation 0003:054C:0DF2.0053: Failed to retrieve feature with reportID 9: -71 [ 1567.390347][T20524] playstation 0003:054C:0DF2.0053: Failed to retrieve DualSense pairing info: -71 [ 1567.439328][ T29] audit: type=1326 audit(2000000553.191:61900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1567.464695][ T29] audit: type=1326 audit(2000000553.191:61901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1567.488223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.534262][T20524] playstation 0003:054C:0DF2.0053: Failed to get MAC address from DualSense [ 1567.543161][T20524] playstation 0003:054C:0DF2.0053: Failed to create dualsense. [ 1567.569875][T20524] playstation 0003:054C:0DF2.0053: probe with driver playstation failed with error -71 [ 1568.091386][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1568.130878][ T29] audit: type=1326 audit(2000000553.191:61902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1568.161152][ T29] audit: type=1326 audit(2000000553.191:61903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1568.184661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.257612][T20524] usb 10-1: USB disconnect, device number 20 [ 1568.263936][ T29] audit: type=1326 audit(2000000553.219:61904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1568.263971][ T29] audit: type=1326 audit(2000000553.219:61905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1568.264000][ T29] audit: type=1326 audit(2000000553.219:61906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1568.311353][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.437563][ T29] audit: type=1326 audit(2000000553.219:61907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1568.503301][ T29] audit: type=1326 audit(2000000553.219:61908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1568.585989][ T29] audit: type=1326 audit(2000000553.219:61909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1568.639843][ T29] audit: type=1326 audit(2000000553.219:61910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28990 comm="syz.0.6715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa0d2f8cda9 code=0x7ffc0000 [ 1568.704292][ T29] audit: type=1400 audit(2000000553.219:61911): avc: denied { execute_no_trans } for pid=28990 comm="syz.0.6715" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=127315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1568.884264][T29023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6725'. [ 1569.203191][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1569.705120][T25773] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1570.292488][T14791] Bluetooth: hci3: command 0x0406 tx timeout [ 1570.315007][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1570.382892][T25773] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 1570.463446][T25773] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.509521][T25773] usb 10-1: config 0 has no interface number 0 [ 1570.515715][T25773] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 228, changing to 11 [ 1570.555924][T25773] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41176, setting to 1024 [ 1570.580144][T25773] usb 10-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1570.595403][T25773] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1570.930581][T25773] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.943243][T25773] usb 10-1: config 0 descriptor?? [ 1570.949264][T29036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1570.963260][T29038] syz.4.6728: attempt to access beyond end of device [ 1570.963260][T29038] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1570.994322][T29038] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6728'. [ 1571.013915][T29036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1571.043504][T25773] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1571.131052][T29046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6730'. [ 1571.426944][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1571.622933][T29036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1571.640578][T29036] lo speed is unknown, defaulting to 1000 [ 1571.686976][T29036] lo speed is unknown, defaulting to 1000 [ 1571.825805][T29012] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6724'. [ 1571.858331][T29012] bond1 (unregistering): Released all slaves [ 1572.015773][T27943] usb 10-1: Failed to submit usb control message: -71 [ 1572.016281][ T9] usb 10-1: USB disconnect, device number 21 [ 1572.023079][T27943] usb 10-1: unable to send the bmi data to the device: -71 [ 1572.060844][T27943] usb 10-1: unable to get target info from device [ 1572.067267][T27943] usb 10-1: could not get target info (-71) [ 1572.087175][T27943] usb 10-1: could not probe fw (-71) [ 1572.538650][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1573.276150][T29065] vivid-007: disconnect [ 1573.287333][T29064] vivid-007: reconnect [ 1573.650466][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1573.952327][T29085] FAULT_INJECTION: forcing a failure. [ 1573.952327][T29085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.965452][T29085] CPU: 1 UID: 0 PID: 29085 Comm: syz.3.6741 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 1573.965473][T29085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1573.965483][T29085] Call Trace: [ 1573.965488][T29085] [ 1573.965495][T29085] dump_stack_lvl+0x16c/0x1f0 [ 1573.965517][T29085] should_fail_ex+0x50a/0x650 [ 1573.965544][T29085] _copy_from_user+0x2e/0xd0 [ 1573.965570][T29085] do_pages_stat+0x1e6/0x800 [ 1573.965597][T29085] ? __pfx_do_pages_stat+0x10/0x10 [ 1573.965628][T29085] ? cpuset_mems_allowed+0x1d9/0x480 [ 1573.965659][T29085] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1573.965689][T29085] ? lockdep_hardirqs_on+0x7c/0x110 [ 1573.965715][T29085] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1573.965744][T29085] kernel_move_pages+0x107d/0x1560 [ 1573.965773][T29085] ? __pfx_kernel_move_pages+0x10/0x10 [ 1573.965794][T29085] ? __pfx___schedule+0x10/0x10 [ 1573.965818][T29085] ? __fget_files+0x206/0x3a0 [ 1573.965838][T29085] ? fput+0x67/0x440 [ 1573.965858][T29085] ? ksys_write+0x1ba/0x250 [ 1573.965888][T29085] __x64_sys_move_pages+0xe0/0x1c0 [ 1573.965909][T29085] ? do_syscall_64+0x91/0x250 [ 1573.965926][T29085] ? lockdep_hardirqs_on+0x7c/0x110 [ 1573.965951][T29085] do_syscall_64+0xcd/0x250 [ 1573.965970][T29085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.965993][T29085] RIP: 0033:0x7f5e7198cda9 [ 1573.966007][T29085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.966023][T29085] RSP: 002b:00007f5e72842038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1573.966039][T29085] RAX: ffffffffffffffda RBX: 00007f5e71ba6160 RCX: 00007f5e7198cda9 [ 1573.966050][T29085] RDX: 0000000020000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 1573.966060][T29085] RBP: 00007f5e72842090 R08: 0000000020000040 R09: 0000000000000000 [ 1573.966071][T29085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1573.966081][T29085] R13: 0000000000000001 R14: 00007f5e71ba6160 R15: 00007ffda8922ad8 [ 1573.966103][T29085] [ 1574.172945][T29074] can: request_module (can-proto-0) failed. [ 1574.569596][T29087] nbd: must specify a device to reconfigure [ 1574.762333][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1574.874507][T29094] overlayfs: failed to resolve './bus': -2 [ 1575.103743][T29105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6745'. [ 1575.333004][T29116] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6751'. [ 1575.565658][T29127] sctp: [Deprecated]: syz.9.6758 (pid 29127) Use of int in max_burst socket option. [ 1575.565658][T29127] Use struct sctp_assoc_value instead [ 1575.580987][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1575.855036][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1575.874110][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1575.943525][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1575.954996][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.974181][ T9] usb 5-1: Product: syz [ 1575.982827][ T9] usb 5-1: Manufacturer: syz [ 1575.994159][ T9] usb 5-1: SerialNumber: syz [ 1576.008332][ T9] usb 5-1: config 0 descriptor?? [ 1576.112307][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1576.387061][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6761'. [ 1576.458310][T29139] bond1 (unregistering): Released all slaves [ 1576.688126][ T5869] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1576.846989][ T5869] usb 4-1: device descriptor read/64, error -71 [ 1576.957224][ T9] gspca_stk1135: reg_w 0x3 err -71 [ 1576.963497][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1576.971865][ T9] gspca_stk1135: Sensor write failed [ 1576.977554][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1576.984419][ T9] gspca_stk1135: Sensor write failed [ 1576.991441][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1576.996608][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1576.998192][ T9] gspca_stk1135: Sensor read failed [ 1577.011954][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1577.019684][ T9] gspca_stk1135: Sensor read failed [ 1577.025748][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 1577.034218][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1577.041595][T29157] syz.9.6764: attempt to access beyond end of device [ 1577.041595][T29157] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1577.054595][ T9] gspca_stk1135: Sensor read failed [ 1577.059820][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1577.069958][ T9] gspca_stk1135: Sensor read failed [ 1577.075733][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1577.082280][ T9] gspca_stk1135: Sensor write failed [ 1577.087733][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1577.095853][ T9] gspca_stk1135: Sensor write failed [ 1577.102283][ T9] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1577.110383][ T5869] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1577.125163][ T9] usb 5-1: USB disconnect, device number 100 [ 1577.222412][T29160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=29160 comm=syz.1.6765 [ 1577.253830][ T5869] usb 4-1: device descriptor read/64, error -71 [ 1577.382094][ T5869] usb usb4-port1: attempt power cycle [ 1577.767190][ T5869] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1577.802307][ T5869] usb 4-1: device descriptor read/8, error -71 [ 1577.826807][T29171] sctp: [Deprecated]: syz.4.6770 (pid 29171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1577.826807][T29171] Use struct sctp_sack_info instead [ 1578.097797][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1578.162462][ T5869] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1578.266504][ T5869] usb 4-1: device descriptor read/8, error -71 [ 1578.379394][T29183] CIFS: Unable to determine destination address [ 1578.397395][ T5869] usb usb4-port1: unable to enumerate USB device [ 1578.871945][T29191] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6776'. [ 1579.199160][ T5869] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1579.220259][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1579.373228][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.383515][ T5869] usb 5-1: config 0 has no interfaces? [ 1579.390980][ T5869] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1579.400192][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1579.408686][ T5869] usb 5-1: Product: syz [ 1579.413036][ T5869] usb 5-1: Manufacturer: syz [ 1579.417620][ T5869] usb 5-1: SerialNumber: syz [ 1579.423029][ T5869] usb 5-1: config 0 descriptor?? [ 1579.754918][T25773] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1579.950052][T29218] CIFS: Unable to determine destination address [ 1579.974060][T25773] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1579.993914][T25773] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1580.016089][T25773] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1580.033367][T25773] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1580.055021][T25773] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1580.067552][T25773] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1580.161409][T25773] usb 10-1: Product: syz [ 1580.179197][T25773] usb 10-1: Manufacturer: syz [ 1580.321414][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1580.786723][T29225] syz.0.6784: attempt to access beyond end of device [ 1580.786723][T29225] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1580.811597][T25773] cdc_wdm 10-1:1.0: skipping garbage [ 1580.819403][T25773] cdc_wdm 10-1:1.0: skipping garbage [ 1580.828159][T25773] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1580.875009][T25773] usb 5-1: USB disconnect, device number 101 [ 1580.991636][T29229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=29229 comm=syz.1.6787 [ 1581.433317][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1582.236355][T29240] /dev/nullb0: Can't open blockdev [ 1582.539845][T20524] usb 10-1: USB disconnect, device number 22 [ 1582.545967][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1583.657064][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1584.768839][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1585.348933][T29291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6805'. [ 1585.461467][T29292] syz.9.6804: attempt to access beyond end of device [ 1585.461467][T29292] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1585.543064][T29294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6806'. [ 1585.891195][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1586.422136][T29306] tap0: tun_chr_ioctl cmd 1074025675 [ 1586.433641][T29306] tap0: persist enabled [ 1586.450529][T29306] tap0: tun_chr_ioctl cmd 1074025675 [ 1586.456372][T29306] tap0: persist enabled [ 1586.992391][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1587.214620][T29323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6811'. [ 1587.248971][T29324] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6813'. [ 1587.357204][T29326] vlan2: entered promiscuous mode [ 1587.527538][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1587.573297][T23287] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 1587.580313][T23288] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1588.104157][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1588.478351][T23288] usb 10-1: Using ep0 maxpacket: 32 [ 1588.487350][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1588.515436][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1588.527527][ T9] usb 5-1: config 0 has no interface number 0 [ 1588.534215][T23288] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1588.543575][T23288] usb 10-1: config 0 has no interface number 0 [ 1588.552649][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1588.563088][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.573474][ T9] usb 5-1: Product: syz [ 1588.579045][ T9] usb 5-1: Manufacturer: syz [ 1588.585083][T23288] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1588.595979][ T9] usb 5-1: SerialNumber: syz [ 1588.601743][T23288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.614124][ T9] usb 5-1: config 0 descriptor?? [ 1588.619751][T23288] usb 10-1: Product: syz [ 1588.625728][T23288] usb 10-1: Manufacturer: syz [ 1588.632301][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1588.641225][T23288] usb 10-1: SerialNumber: syz [ 1588.647922][T23288] usb 10-1: config 0 descriptor?? [ 1588.656386][T23288] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1588.718953][T29346] sp0: Synchronizing with TNC [ 1588.912504][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1588.947073][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1588.975552][T23288] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1589.000428][T23288] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 1589.129917][T29352] could not allocate digest TFM handle sha1_mb [ 1589.226681][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1589.282031][T29324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.412526][T29324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.434741][T29340] ceph: No mds server is up or the cluster is laggy [ 1589.465844][ C0] quatech-serial ttyUSB2: qt2_process_read_urb - unsupported command 147 [ 1589.564850][T29319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.619642][T29319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.709678][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 147 [ 1589.842125][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1589.850225][ T9] usb 10-1: USB disconnect, device number 23 [ 1589.858121][ T9] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1589.904262][ T9] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 1589.939442][ T9] quatech2 10-1:0.51: device disconnected [ 1589.947707][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1589.955425][T23288] usb 5-1: USB disconnect, device number 102 [ 1589.967979][T23288] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1590.013902][T23288] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1590.043951][T23288] quatech2 5-1:0.51: device disconnected [ 1590.327894][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1590.363296][T29363] ebt_limit: overflow, try lower: 570423552/2483027968 [ 1591.156368][T29375] lo speed is unknown, defaulting to 1000 [ 1591.450332][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1591.552060][T29375] lo speed is unknown, defaulting to 1000 [ 1591.942507][T23287] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1591.955217][T23287] Bluetooth: hci1: Injecting HCI hardware error event [ 1591.970962][T14791] Bluetooth: hci1: hardware error 0x00 [ 1592.552648][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1593.663310][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1594.775126][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1595.363150][T14791] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1595.666909][T29409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6836'. [ 1595.771274][T29416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.897623][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1595.924704][T29416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.992543][T20524] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1596.241140][T29415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.251264][T20524] usb 4-1: Using ep0 maxpacket: 32 [ 1596.268626][T20524] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1596.298894][T20524] usb 4-1: config 0 has no interface number 0 [ 1596.414469][T29424] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1596.615261][T20524] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1596.661379][T20524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.681171][T20524] usb 4-1: Product: syz [ 1596.701262][T20524] usb 4-1: Manufacturer: syz [ 1596.705887][T20524] usb 4-1: SerialNumber: syz [ 1596.732229][T20524] usb 4-1: config 0 descriptor?? [ 1596.754302][T20524] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1596.828407][T25773] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1596.968672][T20524] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1596.992419][T20524] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1597.001795][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1597.033004][T25773] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1597.042758][T25773] usb 5-1: config 0 has no interface number 0 [ 1597.049416][T25773] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.083111][T25773] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 58112, setting to 1024 [ 1597.094475][T25773] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1597.103673][T25773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.119914][T25773] usb 5-1: config 0 descriptor?? [ 1597.186022][T29409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.212671][T29409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.233007][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 147 [ 1597.287498][T20524] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1597.457437][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1597.457647][T23288] usb 4-1: USB disconnect, device number 55 [ 1597.476492][T23288] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1597.481253][T20524] usb 10-1: config 1 has an invalid descriptor of length 229, skipping remainder of the config [ 1597.489180][T23288] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1597.508555][T20524] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1597.509742][T23288] quatech2 4-1:0.51: device disconnected [ 1597.531329][T20524] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1597.543021][T20524] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1597.552216][T20524] usb 10-1: SerialNumber: syz [ 1597.783893][T20524] usb 10-1: 0:2 : does not exist [ 1597.789123][T20524] usb 10-1: unit 5: unexpected type 0x0b [ 1597.795186][T25773] usbhid 5-1:0.1: can't add hid device: -71 [ 1597.810588][T25773] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1597.821127][T20524] usb 10-1: USB disconnect, device number 24 [ 1597.828141][T25773] usb 5-1: USB disconnect, device number 103 [ 1598.030007][T29440] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6845'. [ 1598.110588][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1598.544703][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1598.544719][ T29] audit: type=1800 audit(2000000582.441:61967): pid=29446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.6847" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1598.727847][T29448] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6848'. [ 1599.222395][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1599.359074][T29461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6850'. [ 1599.790623][T29449] fuse: Bad value for 'user_id' [ 1599.819896][T29449] fuse: Bad value for 'user_id' [ 1599.960295][T23288] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1600.131732][T23288] usb 4-1: Using ep0 maxpacket: 8 [ 1600.144293][T23288] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.163893][T23288] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1600.177007][T23288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.186506][T23288] usb 4-1: config 0 descriptor?? [ 1600.200508][T23288] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1600.247277][T29468] loop2: detected capacity change from 0 to 7 [ 1600.288051][T29469] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1600.344911][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1600.434100][T29468] Dev loop2: unable to read RDB block 7 [ 1600.523192][T29468] loop2: AHDI p1 p2 [ 1600.595047][T29468] loop2: partition table partially beyond EOD, truncated [ 1600.648962][T29468] loop2: p1 start 2214592512 is beyond EOD, truncated [ 1600.683358][T29473] 9pnet_fd: Insufficient options for proto=fd [ 1600.742701][T29475] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1600.742701][T29475] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1600.772065][T29474] block nbd4: shutting down sockets [ 1600.848336][ T9] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1600.951628][T29488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6860'. [ 1601.007751][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1601.015029][ T9] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1601.023529][ T9] usb 10-1: config 0 has no interface number 0 [ 1601.035482][ T9] usb 10-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1601.044800][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.053011][ T9] usb 10-1: Product: syz [ 1601.057248][ T9] usb 10-1: Manufacturer: syz [ 1601.062249][ T9] usb 10-1: SerialNumber: syz [ 1601.070248][ T9] usb 10-1: config 0 descriptor?? [ 1601.080069][ T9] hub 10-1:0.89: bad descriptor, ignoring hub [ 1601.087237][ T9] hub 10-1:0.89: probe with driver hub failed with error -5 [ 1601.096037][ T9] option 10-1:0.89: GSM modem (1-port) converter detected [ 1601.104432][ T9] usb 10-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1601.146824][T16379] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1601.296547][T16379] usb 5-1: device descriptor read/64, error -71 [ 1601.422243][T20524] usb 10-1: USB disconnect, device number 25 [ 1601.457164][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1601.464527][T20524] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1601.474011][T20524] option 10-1:0.89: device disconnected [ 1602.203737][T23288] gspca_vc032x: reg_w err -110 [ 1602.208760][T23288] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 1602.280324][T16379] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1602.520428][T16379] usb 5-1: device descriptor read/64, error -71 [ 1602.557890][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1602.667096][T16379] usb usb5-port1: attempt power cycle [ 1603.487913][T29504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8297 sclass=netlink_route_socket pid=29504 comm=syz.1.6863 [ 1603.669824][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1603.897326][T20524] usb 4-1: USB disconnect, device number 56 [ 1604.037165][T29516] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1604.050806][T16379] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1604.359659][T16379] usb 5-1: device descriptor read/8, error -71 [ 1604.781563][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1605.893346][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1607.005158][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1607.296476][T29560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.303843][T29560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.430586][T29560] bridge0: entered promiscuous mode [ 1607.478807][T29566] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6880'. [ 1608.116973][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1608.621455][T29577] fuse: Unknown parameter 'rootmà¼òAUHÎ000000000000004' [ 1608.843341][ T29] audit: type=1400 audit(2000000592.066:61968): avc: denied { setopt } for pid=29575 comm="syz.3.6884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1609.228816][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1609.365753][T29590] xt_l2tp: wrong L2TP version: 0 [ 1609.372959][T29590] netlink: 1608 bytes leftover after parsing attributes in process `syz.3.6887'. [ 1610.050479][T29604] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1610.081327][T29606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6890'. [ 1610.351400][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1610.747362][T29613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6894'. [ 1611.327089][T29623] serio: Serial port ptm0 [ 1611.447347][T29631] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6898'. [ 1611.456423][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1611.466112][T29631] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6898'. [ 1611.475220][ T29] audit: type=1400 audit(2000000594.526:61969): avc: denied { connect } for pid=29632 comm="syz.9.6899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1611.698675][ T973] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1611.869907][ T973] usb 4-1: Using ep0 maxpacket: 8 [ 1611.908943][ T973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.930325][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1611.940081][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1611.950390][ T973] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1611.960621][ T973] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1611.975461][ T973] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 1611.988349][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.996378][ T973] usb 4-1: Product: syz [ 1612.000722][ T973] usb 4-1: Manufacturer: syz [ 1612.005568][ T973] usb 4-1: SerialNumber: syz [ 1612.012472][ T973] usb 4-1: config 0 descriptor?? [ 1612.027859][ T973] redrat3 4-1:0.0: Couldn't find all endpoints [ 1612.200895][T16379] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1612.237757][T23288] usb 4-1: USB disconnect, device number 57 [ 1612.362200][T16379] usb 5-1: Using ep0 maxpacket: 32 [ 1612.378069][T16379] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1612.388097][T16379] usb 5-1: config 0 has no interface number 0 [ 1612.410155][T16379] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1612.421163][T16379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.432448][T16379] usb 5-1: Product: syz [ 1612.439583][T16379] usb 5-1: Manufacturer: syz [ 1612.444186][T16379] usb 5-1: SerialNumber: syz [ 1612.451677][T16379] usb 5-1: config 0 descriptor?? [ 1612.460069][T16379] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1612.575025][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1612.690856][T16379] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1612.702417][T16379] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1613.487129][T29638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.495604][T29638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.520212][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 147 [ 1613.562224][T29671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6909'. [ 1613.676150][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1613.739143][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1613.740664][ T973] usb 5-1: USB disconnect, device number 108 [ 1613.791630][ T973] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1613.811634][ T973] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1613.825626][ T973] quatech2 5-1:0.51: device disconnected [ 1613.964768][T25773] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1614.125126][T20524] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1614.380469][T25773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.394982][T25773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1614.410601][T25773] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1614.424273][T25773] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1614.433625][T25773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.451914][T25773] usb 4-1: config 0 descriptor?? [ 1614.531459][T20524] usb 10-1: Using ep0 maxpacket: 16 [ 1614.538154][T20524] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1614.549887][T20524] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1614.563473][T20524] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1614.572600][T20524] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.580912][T20524] usb 10-1: Product: syz [ 1614.585326][T20524] usb 10-1: Manufacturer: syz [ 1614.590075][T20524] usb 10-1: SerialNumber: syz [ 1614.641627][T20524] usb 10-1: config 0 descriptor?? [ 1614.652607][T20524] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1614.700448][T20524] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1614.787934][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1614.889944][T25773] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1615.057677][T25773] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 1615.565132][T25773] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1615.756626][T20524] em28xx 10-1:0.0: unknown em28xx chip ID (116) [ 1615.910458][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1616.382366][T29706] netlink: 'syz.9.6911': attribute type 1 has an invalid length. [ 1616.915621][T23288] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1616.937939][T20524] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1616.945084][T20524] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1616.956964][T20524] em28xx 10-1:0.0: No AC97 audio processor [ 1617.011841][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1617.090027][T23288] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1617.105050][T23288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.135213][T23288] usb 5-1: config 0 has no interface number 0 [ 1617.142113][T23288] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 228, changing to 11 [ 1617.156919][T23288] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41176, setting to 1024 [ 1617.168556][T23288] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1617.181876][T23288] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1617.191302][T23288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.201059][T23288] usb 5-1: config 0 descriptor?? [ 1617.214088][T23288] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1617.569941][ T8] usb 4-1: USB disconnect, device number 58 [ 1617.575768][T29697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6917'. [ 1617.753509][T25773] usb 10-1: USB disconnect, device number 26 [ 1617.761861][T25773] em28xx 10-1:0.0: Disconnecting em28xx [ 1617.775892][T25773] em28xx 10-1:0.0: Freeing device [ 1617.786760][ T8214] usb 5-1: Failed to submit usb control message: -71 [ 1617.786956][T23288] usb 5-1: USB disconnect, device number 109 [ 1617.799843][ T8214] usb 5-1: unable to send the bmi data to the device: -71 [ 1617.809882][ T8214] usb 5-1: unable to get target info from device [ 1617.816899][ T8214] usb 5-1: could not get target info (-71) [ 1617.822774][ T8214] usb 5-1: could not probe fw (-71) [ 1618.134090][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1619.246031][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1620.357739][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1621.469547][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1621.578086][T29759] random: crng reseeded on system resumption [ 1621.698753][T29759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=29759 comm=syz.3.6930 [ 1621.910705][T29779] overlay: ./file0 is not a directory [ 1622.570814][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1622.597846][ T29] audit: type=1800 audit(2000000604.937:61970): pid=29776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.6936" name="/newroot/219/file0" dev="tmpfs" ino=1182 res=0 errno=0 [ 1622.920272][T29793] random: crng reseeded on system resumption [ 1623.147119][T29789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=29789 comm=syz.4.6938 [ 1623.682506][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1624.169644][T29826] CIFS: VFS: Malformed UNC in devname [ 1624.203838][T29826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1624.311248][T29828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6950'. [ 1624.794440][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1625.296982][T16379] IPVS: starting estimator thread 0... [ 1625.458829][T29842] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6951'. [ 1625.459603][T29838] tmpfs: Bad value for 'uid' [ 1625.521499][T29838] tmpfs: Bad value for 'uid' [ 1625.703040][T29839] IPVS: using max 32 ests per chain, 76800 per kthread [ 1625.916848][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1625.984771][ T29] audit: type=1400 audit(2000000608.108:61971): avc: denied { watch watch_reads } for pid=29850 comm="syz.0.6958" path="/285/file0" dev="ramfs" ino=130314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1626.159784][T29852] vivid-007: disconnect [ 1626.174935][T29850] vivid-007: reconnect [ 1626.772365][ T8] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1626.907587][T16379] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1626.996992][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1627.003463][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 149, setting to 64 [ 1627.017999][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1627.021410][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1627.617656][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.625684][ T8] usb 5-1: Product: syz [ 1627.629912][ T8] usb 5-1: Manufacturer: syz [ 1627.634531][ T8] usb 5-1: SerialNumber: syz [ 1627.639449][T16379] usb 4-1: Using ep0 maxpacket: 16 [ 1627.641125][T25772] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1627.646101][T16379] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1627.681452][ T8] usb 5-1: config 0 descriptor?? [ 1627.686560][T16379] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1627.700740][ T8] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1627.711389][T16379] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1627.763026][ T8] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1627.770388][T16379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.787106][T29872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6964'. [ 1627.789481][T16379] usb 4-1: config 0 descriptor?? [ 1627.809207][T29872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6964'. [ 1627.830612][T25772] usb 10-1: Using ep0 maxpacket: 32 [ 1627.838132][T25772] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1627.849538][T25772] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1627.865493][T25772] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1627.886566][T25772] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.908829][T25772] usb 10-1: config 0 descriptor?? [ 1627.915272][T25772] hub 10-1:0.0: USB hub found [ 1628.108793][ T8] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1628.129884][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1628.679658][ T8] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1628.695749][T16379] apple 0003:05AC:0247.0055: unexpected long global item [ 1628.709910][ T8] em28xx 5-1:0.0: board has no eeprom [ 1628.718349][T16379] apple 0003:05AC:0247.0055: parse failed [ 1628.726027][T16379] apple 0003:05AC:0247.0055: probe with driver apple failed with error -22 [ 1628.792880][ T8] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1628.851862][ T8] em28xx 5-1:0.0: dvb set to bulk mode. [ 1628.865759][T16379] em28xx 5-1:0.0: Binding DVB extension [ 1628.881008][ T8] usb 5-1: USB disconnect, device number 110 [ 1628.887535][ T8] em28xx 5-1:0.0: Disconnecting em28xx [ 1628.926268][T25772] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1629.066464][T25773] usb 4-1: USB disconnect, device number 59 [ 1629.099090][T16379] em28xx 5-1:0.0: Registering input extension [ 1629.118291][ T8] em28xx 5-1:0.0: Closing input extension [ 1629.252333][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1629.900939][ T8] em28xx 5-1:0.0: Freeing device [ 1630.150200][T25772] usbhid 10-1:0.0: can't add hid device: -71 [ 1630.161742][T25772] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1630.238553][T25772] usb 10-1: USB disconnect, device number 27 [ 1630.353456][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1631.059546][ T8] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1631.475973][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1632.184778][ T8] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 1632.199668][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.214333][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1632.223224][ T8] usb 5-1: config 0 has no interface number 0 [ 1632.234618][ T8] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1632.256005][ T8] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1632.285403][ T8] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1632.304622][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 1632.325062][ T8] usb 5-1: SerialNumber: syz [ 1632.376337][ T8] usb 5-1: config 0 descriptor?? [ 1632.393246][ T8] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1632.401381][T29912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6973'. [ 1632.538960][T29920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8297 sclass=netlink_route_socket pid=29920 comm=syz.1.6975 [ 1632.587780][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1632.611764][ T8] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 1632.629943][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1632.646260][ T8] usb 5-1: MIDIStreaming interface descriptor not found [ 1632.716693][ T8] usb 5-1: USB disconnect, device number 111 [ 1633.014214][T29929] lo speed is unknown, defaulting to 1000 [ 1633.386706][T29929] lo speed is unknown, defaulting to 1000 [ 1633.699767][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1634.084599][T25773] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1634.143711][T23287] Bluetooth: hci5: Unable to find connection for big 0x00 [ 1634.269694][T25773] usb 5-1: Using ep0 maxpacket: 32 [ 1634.285439][T25773] usb 5-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1634.311302][T29941] Unsupported ieee802154 address type: 0 [ 1634.355425][T25773] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1634.382608][T25773] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1634.391757][T25773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.417982][T25773] usb 5-1: config 0 descriptor?? [ 1634.800753][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1635.797329][T29944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.805906][T29944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.923379][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1636.511399][T23287] Bluetooth: hci4: command 0xfc11 tx timeout [ 1636.511478][T14791] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1637.035219][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1637.058844][T25773] usb 5-1: USB disconnect, device number 112 [ 1638.146929][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1639.248220][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1640.360053][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1641.471738][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1642.594221][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1643.695479][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1644.807284][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1645.919255][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1647.030857][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1648.142677][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1649.254569][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1650.377091][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1651.478146][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1652.600618][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1653.701802][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1654.079534][ T29] audit: type=1800 audit(2000000634.393:61972): pid=29949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.6981" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 1654.814456][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1655.387166][T29995] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6995'. [ 1655.925406][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1656.128590][T16379] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1656.290278][T16379] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1656.298475][T16379] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.308619][T16379] usb 5-1: config 0 has no interface number 0 [ 1656.314844][T16379] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 228, changing to 11 [ 1656.326194][T16379] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41176, setting to 1024 [ 1656.337411][T16379] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1656.350990][T16379] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1656.360219][T16379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.369570][T16379] usb 5-1: config 0 descriptor?? [ 1656.378790][T16379] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1656.595149][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6997'. [ 1656.624523][T30003] bond2 (unregistering): Released all slaves [ 1656.711613][T22377] usb 5-1: Failed to submit usb control message: -71 [ 1656.711659][T25773] usb 5-1: USB disconnect, device number 113 [ 1656.725003][T22377] usb 5-1: unable to send the bmi data to the device: -71 [ 1656.732308][T22377] usb 5-1: unable to get target info from device [ 1656.738750][T22377] usb 5-1: could not get target info (-71) [ 1656.744562][T22377] usb 5-1: could not probe fw (-71) [ 1657.048085][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1658.149062][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1659.260874][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1660.372763][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1661.484496][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1662.607039][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1663.719568][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1664.403895][ T6067] kworker/1:7 (6067) used greatest stack depth: 16688 bytes left [ 1664.820118][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1665.931870][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1667.043635][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1668.155515][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1669.277969][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1670.379114][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1670.604664][T30028] hsr0: entered allmulticast mode [ 1671.068108][T30028] hsr_slave_0: entered allmulticast mode [ 1671.081619][T30028] hsr_slave_1: entered allmulticast mode [ 1671.105513][ T29] audit: type=1800 audit(2000000650.295:61973): pid=30031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6999" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1671.380818][T30036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7005'. [ 1671.411141][T30034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8297 sclass=netlink_route_socket pid=30034 comm=syz.3.7004 [ 1671.433975][T30036] netlink: 'syz.1.7005': attribute type 9 has an invalid length. [ 1671.475472][T30036] netlink: 'syz.1.7005': attribute type 7 has an invalid length. [ 1671.490932][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1671.513520][T30036] netlink: 'syz.1.7005': attribute type 8 has an invalid length. [ 1672.613501][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1672.710469][T30052] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7008'. [ 1672.719484][T30052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7008'. [ 1672.728523][T30052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7008'. [ 1672.755928][T30052] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7008'. [ 1672.765345][T30052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7008'. [ 1672.774757][T30052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7008'. [ 1673.543733][T30057] random: crng reseeded on system resumption [ 1673.725269][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1673.781461][T30055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=30055 comm=syz.3.7011 [ 1674.837070][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1674.839550][T30073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7012'. [ 1675.058016][T30069] syz.4.7012: attempt to access beyond end of device [ 1675.058016][T30069] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1675.899593][T30080] sctp: [Deprecated]: syz.3.7016 (pid 30080) Use of int in maxseg socket option. [ 1675.899593][T30080] Use struct sctp_assoc_value instead [ 1675.948912][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1675.966543][T30083] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1676.125959][T30089] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7019'. [ 1676.305696][T30097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7022'. [ 1676.443350][T30101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8297 sclass=netlink_route_socket pid=30101 comm=syz.1.7018 [ 1677.060721][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1677.167656][ T8] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1677.373032][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.402864][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.441128][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1677.508432][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1677.549804][T30113] sp0: Synchronizing with TNC [ 1677.565439][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.595811][ T8] usb 5-1: config 0 descriptor?? [ 1678.161857][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1678.550074][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 1678.556130][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1678.592270][ T8] usb 5-1: USB disconnect, device number 114 [ 1679.284655][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1680.396211][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1680.429142][T30133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7032'. [ 1681.103020][T30147] vivid-007: disconnect [ 1681.497619][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1682.060923][T30152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7036'. [ 1682.114045][T30137] vivid-007: reconnect [ 1682.167737][ T29] audit: type=1326 audit(2000000660.659:61974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30150 comm="syz.1.7037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8e4d8cda9 code=0x0 [ 1682.609169][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1683.072248][T30160] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7040'. [ 1683.731665][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1683.850143][T16379] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1684.843507][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1685.006777][T16379] usb 10-1: Using ep0 maxpacket: 32 [ 1685.391850][T16379] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1685.400740][T16379] usb 10-1: config 0 has no interface number 0 [ 1685.428245][T16379] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1685.463601][T16379] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.472206][T16379] usb 10-1: Product: syz [ 1685.506116][T30173] lo speed is unknown, defaulting to 1000 [ 1685.512356][T16379] usb 10-1: Manufacturer: syz [ 1685.527754][T16379] usb 10-1: SerialNumber: syz [ 1685.533912][T16379] usb 10-1: config 0 descriptor?? [ 1685.716514][T16379] usb 10-1: can't set config #0, error -71 [ 1685.729739][T16379] usb 10-1: USB disconnect, device number 28 [ 1685.944779][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1686.338238][T30192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7045'. [ 1686.964881][T30173] lo speed is unknown, defaulting to 1000 [ 1686.978864][T30200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7050'. [ 1687.056452][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1687.366368][T30204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8297 sclass=netlink_route_socket pid=30204 comm=syz.9.7051 [ 1688.178956][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1688.548072][T30213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=30213 comm=syz.9.7053 [ 1689.121180][T30222] random: crng reseeded on system resumption [ 1689.290789][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1689.574285][T30218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=30218 comm=syz.9.7055 [ 1690.055432][T16379] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1690.276891][T16379] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1690.314010][T16379] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1690.392055][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1690.446058][T16379] usb 4-1: config 1 has no interface number 0 [ 1690.452224][T16379] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1690.487083][T16379] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1690.808913][ T9] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1691.081379][T16379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.103008][T16379] usb 4-1: Product: syz [ 1691.107328][T16379] usb 4-1: Manufacturer: syz [ 1691.112312][T16379] usb 4-1: SerialNumber: syz [ 1691.125652][T16379] usb 4-1: selecting invalid altsetting 1 [ 1691.169834][T30251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7062'. [ 1691.193901][T23288] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1691.228547][ T9] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1691.249036][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.292075][ T9] usb 5-1: config 0 has no interface number 0 [ 1691.308248][ T9] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 228, changing to 11 [ 1691.320634][ T9] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41176, setting to 1024 [ 1691.334753][ T9] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1691.354371][T16379] cdc_ncm 4-1:1.1: bind() failure [ 1691.359620][ T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1691.374199][T16379] usb 4-1: USB disconnect, device number 60 [ 1691.381510][T23288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.394490][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.403147][T23288] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1691.413970][T23288] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1691.427504][ T9] usb 5-1: config 0 descriptor?? [ 1691.432960][T23288] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1691.444861][T23288] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.463526][T23288] usb 10-1: config 0 descriptor?? [ 1691.468947][ T9] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1691.503805][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1691.675151][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7060'. [ 1691.777805][T16379] usb 5-1: USB disconnect, device number 115 [ 1691.784082][ T8202] usb 5-1: Failed to submit usb control message: -71 [ 1691.810404][ T8202] usb 5-1: unable to send the bmi data to the device: -71 [ 1691.818671][ T8202] usb 5-1: unable to get target info from device [ 1691.827990][ T8202] usb 5-1: could not get target info (-71) [ 1691.833889][ T8202] usb 5-1: could not probe fw (-71) [ 1691.928742][T23288] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 1691.970896][T23288] plantronics 0003:047F:FFFF.0056: No inputs registered, leaving [ 1692.027821][T23288] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1692.071478][T30259] fuse: Unknown parameter 'Ÿ<4Äcës°ó£Žõÿ½ªs0÷ó•†R‰šþTÐè¬Ê‰J'§â*©€§:üÿÿÁ; â ° [ 1692.071478][T30259] ì¢þ½²ŒÆøK¡ËG(bÃèa3j¨.Wa%L$' [ 1692.344886][T30272] syz.3.7065: attempt to access beyond end of device [ 1692.344886][T30272] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1692.374371][T30272] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7065'. [ 1692.615578][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1692.777541][T30281] sp0: Synchronizing with TNC [ 1692.805674][T30282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7068'. [ 1692.890536][T30283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8297 sclass=netlink_route_socket pid=30283 comm=syz.4.7070 [ 1693.666413][T23288] usb 10-1: USB disconnect, device number 29 [ 1693.738087][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1693.787407][T30287] random: crng reseeded on system resumption [ 1693.977470][T30289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=30289 comm=syz.3.7072 [ 1694.349984][T30292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8297 sclass=netlink_route_socket pid=30292 comm=syz.4.7071 [ 1694.839215][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1695.951098][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1696.679209][T30312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7077'. [ 1696.838844][T16379] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1696.870747][T30315] sp0: Synchronizing with TNC [ 1697.062853][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1697.693959][T16379] usb 4-1: Using ep0 maxpacket: 32 [ 1698.185377][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1698.276319][T16379] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1698.285475][T16379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.310312][T16379] usb 4-1: Product: syz [ 1698.331346][T16379] usb 4-1: Manufacturer: syz [ 1698.341853][T16379] usb 4-1: SerialNumber: syz [ 1698.357322][T16379] usb 4-1: config 0 descriptor?? [ 1698.364716][T16379] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1698.650024][T30332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8297 sclass=netlink_route_socket pid=30332 comm=syz.4.7082 [ 1699.214881][T16379] gspca_stk1135: reg_w 0x0 err -110 [ 1699.224683][T16379] gspca_stk1135: serial bus timeout: status=0x00 [ 1699.231067][T16379] gspca_stk1135: Sensor write failed [ 1699.244590][T16379] gspca_stk1135: serial bus timeout: status=0x00 [ 1699.251006][T16379] gspca_stk1135: Sensor write failed [ 1699.256427][T16379] gspca_stk1135: serial bus timeout: status=0x00 [ 1699.263729][T16379] gspca_stk1135: Sensor read failed [ 1699.285994][T16379] gspca_stk1135: serial bus timeout: status=0x00 [ 1699.297372][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1699.305737][T16379] gspca_stk1135: Sensor read failed [ 1699.322104][T16379] gspca_stk1135: Detected sensor type unknown (0x0) [ 1699.359304][T16379] gspca_stk1135: serial bus timeout: status=0x00 [ 1699.407291][T16379] gspca_stk1135: Sensor read failed [ 1699.430429][T16379] gspca_stk1135: serial bus timeout: status=0x00 [ 1699.480540][T16379] gspca_stk1135: Sensor read failed [ 1699.509029][T16379] gspca_stk1135: serial bus timeout: status=0x00 [ 1699.526419][T16379] gspca_stk1135: Sensor write failed [ 1699.541758][T16379] gspca_stk1135: serial bus timeout: status=0x00 [ 1699.594351][T16379] gspca_stk1135: Sensor write failed [ 1699.616944][T16379] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 1699.833703][ T973] usb 4-1: USB disconnect, device number 61 [ 1700.398371][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1701.367236][T30368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7090'. [ 1701.510200][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1702.291593][T30372] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7091'. [ 1702.484422][T30376] [ 1702.486772][T30376] ====================================================== [ 1702.493759][T30376] WARNING: possible circular locking dependency detected [ 1702.500758][T30376] 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 Not tainted [ 1702.507510][T30376] ------------------------------------------------------ [ 1702.514519][T30376] syz.3.7092/30376 is trying to acquire lock: [ 1702.520576][T30376] ffff88806b695c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 1702.529899][T30376] [ 1702.529899][T30376] but task is already holding lock: [ 1702.537258][T30376] ffff88807840ac68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1702.545529][T30376] [ 1702.545529][T30376] which lock already depends on the new lock. [ 1702.545529][T30376] [ 1702.555909][T30376] [ 1702.555909][T30376] the existing dependency chain (in reverse order) is: [ 1702.564896][T30376] [ 1702.564896][T30376] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 1702.572255][T30376] __mutex_lock+0x19b/0xb10 [ 1702.577265][T30376] pipe_lock+0x64/0x80 [ 1702.581832][T30376] iter_file_splice_write+0x1eb/0x10b0 [ 1702.587799][T30376] do_splice+0x146a/0x1f70 [ 1702.592720][T30376] __do_splice+0x327/0x360 [ 1702.597642][T30376] __x64_sys_splice+0x187/0x250 [ 1702.602999][T30376] do_syscall_64+0xcd/0x250 [ 1702.608002][T30376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.614400][T30376] [ 1702.614400][T30376] -> #2 (sb_writers#6){.+.+}-{0:0}: [ 1702.621776][T30376] mnt_want_write+0x6f/0x450 [ 1702.626872][T30376] ovl_create_object+0x12e/0x300 [ 1702.632315][T30376] lookup_open.isra.0+0x11d2/0x1580 [ 1702.638017][T30376] path_openat+0x904/0x2d80 [ 1702.643019][T30376] do_filp_open+0x20c/0x470 [ 1702.643371][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1702.648016][T30376] do_sys_openat2+0x17a/0x1e0 [ 1702.648039][T30376] __x64_sys_openat+0x175/0x210 [ 1702.665461][T30376] do_syscall_64+0xcd/0x250 [ 1702.670468][T30376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.676867][T30376] [ 1702.676867][T30376] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 1702.685535][T30376] down_read+0x9a/0x330 [ 1702.690189][T30376] walk_component+0x342/0x5b0 [ 1702.695371][T30376] path_lookupat+0x17f/0x770 [ 1702.700465][T30376] filename_lookup+0x221/0x5f0 [ 1702.705731][T30376] kern_path+0x35/0x50 [ 1702.710302][T30376] lookup_bdev+0xd9/0x280 [ 1702.715135][T30376] resume_store+0x1d8/0x460 [ 1702.720137][T30376] kobj_attr_store+0x55/0x80 [ 1702.725225][T30376] sysfs_kf_write+0x117/0x170 [ 1702.730403][T30376] kernfs_fop_write_iter+0x33d/0x500 [ 1702.736190][T30376] vfs_write+0x5ae/0x1150 [ 1702.741022][T30376] ksys_write+0x12b/0x250 [ 1702.745853][T30376] do_syscall_64+0xcd/0x250 [ 1702.750856][T30376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.757250][T30376] [ 1702.757250][T30376] -> #0 (&of->mutex){+.+.}-{4:4}: [ 1702.764445][T30376] __lock_acquire+0x249e/0x3c40 [ 1702.769807][T30376] lock_acquire.part.0+0x11b/0x380 [ 1702.775423][T30376] __mutex_lock+0x19b/0xb10 [ 1702.780425][T30376] kernfs_fop_write_iter+0x27b/0x500 [ 1702.786212][T30376] iter_file_splice_write+0x90f/0x10b0 [ 1702.792178][T30376] do_splice+0x146a/0x1f70 [ 1702.797097][T30376] __do_splice+0x327/0x360 [ 1702.802016][T30376] __x64_sys_splice+0x187/0x250 [ 1702.807382][T30376] do_syscall_64+0xcd/0x250 [ 1702.812388][T30376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.818790][T30376] [ 1702.818790][T30376] other info that might help us debug this: [ 1702.818790][T30376] [ 1702.828994][T30376] Chain exists of: [ 1702.828994][T30376] &of->mutex --> sb_writers#6 --> &pipe->mutex [ 1702.828994][T30376] [ 1702.841052][T30376] Possible unsafe locking scenario: [ 1702.841052][T30376] [ 1702.848475][T30376] CPU0 CPU1 [ 1702.853815][T30376] ---- ---- [ 1702.859157][T30376] lock(&pipe->mutex); [ 1702.863297][T30376] lock(sb_writers#6); [ 1702.869952][T30376] lock(&pipe->mutex); [ 1702.876603][T30376] lock(&of->mutex); [ 1702.880563][T30376] [ 1702.880563][T30376] *** DEADLOCK *** [ 1702.880563][T30376] [ 1702.888685][T30376] 2 locks held by syz.3.7092/30376: [ 1702.893856][T30376] #0: ffff888024044420 (sb_writers#9){.+.+}-{0:0}, at: __do_splice+0x327/0x360 [ 1702.902894][T30376] #1: ffff88807840ac68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1702.911567][T30376] [ 1702.911567][T30376] stack backtrace: [ 1702.917431][T30376] CPU: 0 UID: 0 PID: 30376 Comm: syz.3.7092 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 1702.917447][T30376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1702.917455][T30376] Call Trace: [ 1702.917460][T30376] [ 1702.917466][T30376] dump_stack_lvl+0x116/0x1f0 [ 1702.917481][T30376] print_circular_bug+0x490/0x760 [ 1702.917501][T30376] check_noncircular+0x31a/0x400 [ 1702.917517][T30376] ? __pfx_check_noncircular+0x10/0x10 [ 1702.917534][T30376] ? lock_acquire.part.0+0x11b/0x380 [ 1702.917552][T30376] ? lockdep_lock+0xc6/0x200 [ 1702.917566][T30376] ? __pfx_lockdep_lock+0x10/0x10 [ 1702.917580][T30376] __lock_acquire+0x249e/0x3c40 [ 1702.917600][T30376] ? __pfx___lock_acquire+0x10/0x10 [ 1702.917617][T30376] ? hlock_class+0x4e/0x130 [ 1702.917630][T30376] lock_acquire.part.0+0x11b/0x380 [ 1702.917648][T30376] ? kernfs_fop_write_iter+0x27b/0x500 [ 1702.917663][T30376] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1702.917681][T30376] ? rcu_is_watching+0x12/0xc0 [ 1702.917694][T30376] ? trace_lock_acquire+0x14e/0x1f0 [ 1702.917708][T30376] ? kernfs_fop_write_iter+0x27b/0x500 [ 1702.917722][T30376] ? lock_acquire+0x2f/0xb0 [ 1702.917738][T30376] ? kernfs_fop_write_iter+0x27b/0x500 [ 1702.917753][T30376] __mutex_lock+0x19b/0xb10 [ 1702.917765][T30376] ? kernfs_fop_write_iter+0x27b/0x500 [ 1702.917779][T30376] ? __asan_memcpy+0x3c/0x60 [ 1702.917798][T30376] ? kernfs_fop_write_iter+0x27b/0x500 [ 1702.917813][T30376] ? __pfx___mutex_lock+0x10/0x10 [ 1702.917826][T30376] ? __pfx__copy_from_iter+0x10/0x10 [ 1702.917847][T30376] ? __virt_addr_valid+0x5e/0x590 [ 1702.917860][T30376] ? __phys_addr_symbol+0x30/0x80 [ 1702.917873][T30376] ? kernfs_fop_write_iter+0x27b/0x500 [ 1702.917887][T30376] kernfs_fop_write_iter+0x27b/0x500 [ 1702.917903][T30376] iter_file_splice_write+0x90f/0x10b0 [ 1702.917926][T30376] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1702.917947][T30376] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1702.917966][T30376] ? __do_splice+0x327/0x360 [ 1702.917985][T30376] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1702.918004][T30376] do_splice+0x146a/0x1f70 [ 1702.918025][T30376] ? __pfx_do_splice+0x10/0x10 [ 1702.918043][T30376] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1702.918059][T30376] ? __pfx_lock_release+0x10/0x10 [ 1702.918076][T30376] ? trace_lock_acquire+0x14e/0x1f0 [ 1702.918091][T30376] __do_splice+0x327/0x360 [ 1702.918109][T30376] ? __pfx___do_splice+0x10/0x10 [ 1702.918127][T30376] ? __fget_files+0x206/0x3a0 [ 1702.918140][T30376] __x64_sys_splice+0x187/0x250 [ 1702.918172][T30376] do_syscall_64+0xcd/0x250 [ 1702.918186][T30376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.918205][T30376] RIP: 0033:0x7f5e7198cda9 [ 1702.918215][T30376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1702.918228][T30376] RSP: 002b:00007f5e72863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1702.918239][T30376] RAX: ffffffffffffffda RBX: 00007f5e71ba6080 RCX: 00007f5e7198cda9 [ 1702.918248][T30376] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 1702.918255][T30376] RBP: 00007f5e71a0e2a0 R08: 000000000000bfd1 R09: 0000000000000000 [ 1702.918263][T30376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1702.918271][T30376] R13: 0000000000000001 R14: 00007f5e71ba6080 R15: 00007ffda8922ad8 [ 1702.918287][T30376] [ 1703.530720][ T973] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 1703.680439][ T973] usb 4-1: device descriptor read/64, error -71 [ 1703.744457][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1703.936941][ T973] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 1704.076090][ T973] usb 4-1: device descriptor read/64, error -71 [ 1704.194462][ T973] usb usb4-port1: attempt power cycle [ 1704.589140][ T973] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 1704.610779][ T973] usb 4-1: device descriptor read/8, error -71 [ 1704.856294][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1704.877724][ T973] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 1704.899588][ T973] usb 4-1: device descriptor read/8, error -71 [ 1705.028604][ T973] usb usb4-port1: unable to enumerate USB device [ 1705.957459][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1707.069236][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1708.181072][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1709.292910][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1710.404707][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1711.516540][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available