last executing test programs: 22m29.815690479s ago: executing program 2 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = accept(r0, 0x0, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x1404, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_usb_connect(0x2, 0x3d, 0x0, 0x0) 22m27.415959682s ago: executing program 2 (id=221): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff, 0x4}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0xfffffffffffffdef, 0x0, 0x0) 22m27.042194405s ago: executing program 2 (id=222): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="d90a23050f99aaaaaaaabfaabb0800450000700000000000019078ac1e000104000000000000000334000045000000000f000008010000ac1e0001ac1414aa863d000000030606dcccbe7d2b09b7649ad788d9630602020ff34b1113ca917ca5e8fb5d6e520504d0ee06119fbc32084c0102000000"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000200)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) syz_open_pts(r3, 0x38040) socket$phonet(0x23, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd1a44efb9f49fc000008ad5c8c82b8af584cbf2649a50f2dbc08efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b51584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe"], 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f00000023c0)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000000540)=""/173, 0xad}, 0x80}, {{&(0x7f0000000300)=@ax25={{0x3, @default}, [@remote, @default, @netrom, @null, @default, @rose, @netrom, @bcast]}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000740)=""/144, 0x90}, {&(0x7f0000001900)=""/9, 0x9}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/8, 0x8}, {&(0x7f0000001880)=""/89, 0x59}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001940)}, {&(0x7f0000001940)=""/54, 0x36}, {&(0x7f00000019c0)=""/21, 0x15}], 0xa}, 0xe}, {{&(0x7f0000001ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001b40)}, 0x4}, {{&(0x7f0000001b80)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/32, 0x20}], 0x1, &(0x7f0000001c80)=""/119, 0x77}, 0x8}, {{&(0x7f0000001d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001d80)=""/229, 0xe5}, {&(0x7f0000001e80)=""/197, 0xc5}, {&(0x7f0000002580)=""/213, 0xd5}, {&(0x7f0000002080)=""/76, 0x4c}, {&(0x7f0000002100)=""/135, 0x87}, {&(0x7f00000021c0)=""/221, 0xdd}], 0x6, &(0x7f0000002500)=""/114, 0x72}}], 0x5, 0x1, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="100c0608266be7d0ec5020895ae9", 0xe, 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3d, 0x1af8}]}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 22m26.000575781s ago: executing program 2 (id=228): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x300}) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0xfffffc01, 0x166}, 0x9c) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x21f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 22m24.996100309s ago: executing program 2 (id=232): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x200000000000006b, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x10) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f0000000500)="aee174928aa0ca37489a3652e16fd99cd383701cd9c91e396797375f264c5def68def70afe895557a7a9cffe6bb20056e0a60ff58289f1cbcff2ead0efa1c8b1e0064561808fad3bec0d0f178c9d68065949af8f76a2d8ed5189009b5f6d82ffc91982fc299999c28828eea8890046044703e8d6a69621b842b7557601495137d7aa36df50cbc8c8598af96e73b86fa1d8818879df28db11741fe21c3482cdaed8fcaf20e02315bfc42d480d007f617a0322d1e6d55f23ac421d63322ec17f94fa6eabc9037c4dde7f7c9dfb6a62455d2dab16e10474315b27c11bd5c992d846a9d47681144d17030dacdddc26d8b051bb", 0xf1) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000300)={0xf0f009, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206030300000000000000000000000005000100070000000900020073797a3100000000140007800500150003000000080012400000000013000300686173683a6e65742c696661636500000500050002000000050004"], 0x60}}, 0x0) 22m23.996284792s ago: executing program 2 (id=235): setfsgid(0xee00) r0 = syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x342}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x20000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/time\x00') 22m7.984109506s ago: executing program 32 (id=235): setfsgid(0xee00) r0 = syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x342}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x20000084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/time\x00') 19m21.76385683s ago: executing program 5 (id=619): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180106000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 19m21.671101134s ago: executing program 5 (id=621): ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000004c0), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001500)=0x14) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffd, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r8, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x22, 0xef, 0x4, 0xc, 0x10000, 0xffffffffffffffff, 0xd, '\x00', r8, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 19m20.695003329s ago: executing program 5 (id=626): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x84880, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(0x0, 0x400, 0x400) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x2b) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) pselect6(0x40, &(0x7f0000000140)={0x7, 0xfffffffffffffe01, 0xb427, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff9, 0x40, 0x9}, 0x0, &(0x7f0000000240)={0x1b2, 0x6, 0xe2c, 0x5, 0xfff0000000000000, 0x1ff, 0x3, 0xd}, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xc, 0x2, 0x0, "40110fb508ac2efaf2d59eba97da126cdc62c1ce71ae6b4ad019d5e0fee5f2f5", 0x55595659}) 19m20.526349817s ago: executing program 5 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10, @bcast, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 19m20.379417818s ago: executing program 5 (id=630): ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/50, 0x304000, 0x800, 0x0, 0x1}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000004c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001500)=0x14) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r9, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x22, 0xef, 0x4, 0xc, 0x10000, 0xffffffffffffffff, 0xd, '\x00', r9, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 19m19.421386304s ago: executing program 5 (id=635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro', @ANYRESDEC=0x0]) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000003f000701feffffff00070000017c000010004280040003800600dd00800a00000c00018006002000800a0000180002801400178004"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x1}, 0x8) close(r4) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0) 19m18.803899755s ago: executing program 33 (id=635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro', @ANYRESDEC=0x0]) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000003f000701feffffff00070000017c000010004280040003800600dd00800a00000c00018006002000800a0000180002801400178004"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x1}, 0x8) close(r4) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0) 10m31.951626606s ago: executing program 3 (id=2324): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) (async, rerun: 32) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x85}, 0x0) (rerun: 32) r0 = mmap$IORING_OFF_SQES(&(0x7f000094f000/0x2000)=nil, 0x2000, 0x4, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x6000, @fd, 0x9, 0x60db, 0x7fff, 0x1}) (async) r1 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x8031, 0xffffffffffffffff, 0xb9e69000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) (rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="e00000002fc6dcf87b6537821242ec8cce79c848e89c0ce9b32d9679cdf9dac6", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="18008900002eaea73e0000000000000000000000dac551cda831f5d820b22a593c759a3812c1e2bba8528e211b81e245cbec6b036dff30a1e667b1701517eb4bf21357acdd0e247dfc8257fb564f3be76e3f2cdfc652e575c1addcb25849aceeeff108cf5495b3565e56cad9029946ef82ec68648ec51256270c3568286fae6981e0bdc649ab802bbbff2b76dc6332ea0672c990be159d34aaa12a955e5c2a9165c82f", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYBLOB="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", @ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$COMEDI_SETWSUBD(0xffffffffffffffff, 0x6411) (rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100), 0x1001) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r6}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async, rerun: 32) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r1, @ANYRES64], 0x367) (rerun: 32) syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000aa3a3740480b032061390000000109021b000100000000090453000127a141000905"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) syz_emit_ethernet(0x5a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbabbbbbbbbb81000500000d010000400700001e091741dddd5481f6862a5d08519d777f152a080afe197f4866d64e3dd2e828331bafafd0f88681137a482866ad345781a2c040546fcf23544dcd7c27ca5c4fa542af87016d3ce860853d335523daa5e145dfba536c385f522ec8c44717789ee744b52d2bcdb3a1136121087e52ee0f75a9c8571873d2824ed7df5c8e9c109dbf184e058c464b89e94d1b273c6bd76b1d89c7a7b57e7979af669eda7dbfce4a456ce1d84c8f5bd579feb30d601707d8ac410c149daca5c899b3cfc693d887d8ae0dc746a607dbfafb802b6fdf26f2e1cdd9f66efb7cd04606991548a23a528c"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) 10m30.273833595s ago: executing program 3 (id=2329): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$pppl2tp(0x18, 0x1, 0x1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65dd}) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) tkill(r7, 0x12) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000020"]) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r8, &(0x7f0000000140)=""/16, 0x10, 0x10000000b6) 10m28.728133334s ago: executing program 3 (id=2333): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) timer_create(0x4, &(0x7f0000000140)={0x0, 0x15, 0x4, @thr={&(0x7f0000000400)="4f2837e97c850e5b825aa169c44b57dda92b6c84abc13a170444df86463b7b7a598699f7edaa3b0cbc1381f48e690ddd161c801d8435997149719b909a2de824bfe34856229c1d4c5869ebfac00591593b81ace26784081ada9a208a5f07a36a366081a0d7cc02577745be2f474d8ab21093fbcc06f409fdcc2abe8f0fb7573c5a937dc6fb72e3787e65e8dd213bab65fabdecdca29b73f173c3214cd19d02ccda994dc23eee7a86801ffff9b676db4ae04d67c5e5f117a4cd2d398db4c1050c2c141f599bb47da48d01fb01b58afe7fa50afe8e7249481005486413180339f1f736f38a7c5f6ba3d988f7581b90d28c11ce42f04c75273a573adea9dcae811169caa45ffe1ca1650d2549dcf253df069d215834eb057cddf1326ef6bce42c9573f45f0bbad54f07a10f9a95bba85510dddc9380a5e02b3f3b65c712f9d7643ab847c8036d1ee816f07b7d70766eda678db7dedaff99fcb6ff287ec772d75f2ee99387488bd4f098660bcfeb71293c5bb0fdad13ddf0e0cb2c0e4a95e17e55826c8d42a992e8ee5242f84ff3af956e5cbd085a219c9ddeceb69f22b12f87e50221abad73f2d846a2d685b18ff929f97d7349263f83c27add3004960a826e14745d93bd6f61310d9a71d0ef990c6466ba869a5a029d87bd2f62b06473abfefbc712400cd1feaf033036f4d7464e346fe6e17e327656cba373bb55015895fae55b318c20a3f175810a28231777053c0f19b22a7278ad557ab9a2bea733e5f7b98874a8d866aa91115804409e9dd852759248dcecf669de5819b2432efcf93d44e60efa92031cfb5fc42c66cd92d33a4e0cf41c5c0fa61290129a0c4b2d7081da2a90c4a15a5f0df47f10a0914212c9b509595617330ac6ebf5dd46911527eca496e249f59abe19fc9cdead03d8feee5b6c9eecaac7de2b5a37c3dd89ea2198b92e40065e7dbdbaea3637a19ae3b6c0e12083ce8d15f8fbf2213cf71010979d9430def4eafe0b8619f122ef33de580d2125075860c3646a2edac52f60ff5063a1c14d0360567480ff3b954a8d86af5664f684ff1dae6c72a076f35841a8e35000497f2e407065d1522392ba4fb8cf7045c5a89951069409194e3861b1cb380b483c2ed1830e2c2bfa07ba9ebf5cbee3765e9273374aaff3a116a16854b7a012446dc83b676855d48131a1a99b498ccbc956b551ebdf784435b7fe0a10aa40554bb8d7997c5b2b48779e38e3e93e814f87784be9f88c60dcebe6b17f964d273f5e28feb961d2085ace8d0577dc4dbd7cfc817275ca9b7be9583801a5c0fcb0632913b367ef18e5c7414ab2414eff58fc0046e51ee05d16ba70e95eb6690cba15eecbb40b1619e9e993582c0ce28139d4f8442d8b08c7eeeb5145006c84145cae8f8db34a01f2ab53bc71d315230f94bfbf5fcaa825fcf3524eb5dbb7fbbc0e945986a132730f86b31476fca4e73ad2ddce7393a66ec432e0ae832828c5d127e4e5a2596609b238a2a48b1f27fabd309fc6ced789d42095ea5b5cb71f116a5bbaab899f9e4436fab323d70b78aea2eb0ff825ebfab2bd34f8473d87a30230447127fbe2d6f4dc54fa4e5dda168216e6506ffde24a112ab0a5021a5cdf17ce363ad7fb202350a21d7235ef264f1c6fa09dd1a705eaafcbb0617380d03473d58a02630a7c0579e796dbad859fcf379436ff6f1d300f76962a76d9db57fe6fbe803326900b8779406b0b39818af0f97bd6701f4722cc3e21e0d5de709fbe220a6ddd6adb8e2325c6e0eb8830f303458303b71a2e795e12e01d068a804f5cff45a84dedff652826e3b6dd898657759ab27cefb4dc542f476b0a79d4516d0cb47fd8660dac687da5794a4cd2d0725b071dde4809edfab9296e1d667d69ba7f264b21d26113d237df48a19525f0a744a6c0c1bfb13089bc4db1a89a29162f4c2192f3ec5978542c6b188e861cd9f7d65cd1a18937d09533dc89e66d4987be8ce1bb212e8d9ecf66593e55abadbcb81c3bd6b2ac99696e586eff96bf88d6587b07bd81e40a99e26c53049f3293152a6c7d00a15458195b67e4f22bcb92ab90b07978e982b747b7ac6aa2dea21512bf403df00d08ab72790313da1c57f1eb00213d20ba35991d01849e477cae63e3e77b0be087695fdd5059bea1b0392489d5b3fff5e72ccbcd956976f8a75f503dc29d5b5841a894d31e45863c9d27c7e73dc08255c76bbb68e86b4831549ed2015d508dee53d1aa3b37714493659c92d23df77063cb6ed5bd38fcacd5c1dad8507fde8fba0ae1312bbcf734d29bf04a00a8a301b4541a455362fcccd464bd1126bb1787f370c260ec1fc2f09ef83c094402bca883b5862c91369fe6142c8af869aeb949125ae7fd6427a387ef28b00864dcca8696915d363808b38e68b2b996944f071df3cd7a0af594952a87fde76f1ab92c9cc271c94f3aef504339ec7a286dc112c65fc959809a91c9d61b48e0bc71f2d70f732be504cc96caa6314c5147183b1d90debe8bdc9e08b04f4fa8f02e33175b5196e2ea74dbe3c940547d5dbec3580d4736f5564afcdd0cffa06e813ba73c315cdc8b68399f5a9886f247d7a852d8363c58c6e7b3dd34268c2907330e71c0805afaccbeac395e5d37257fedcc85d6827a731ae59c4f1b4adcc9db4c5b28ac7f243708f8e19653e2daebb02476a27643557da309f79982aa68d74d390e7e326f965f5a7d6ec969c43c3beacb0d7ba009d987cbbf73264b600d037ba9f4b3e8d5056be4bbfbcf9c06ec29844ea1b0a9828a4756438ebff555643603dccfc6e0709a10df26f25e22ffadb80d19c167f115fd3d4ca999e56ecbda2aa73601e7f9a3cde88e56f75001ea072cc7f59d748d2eaec220c44f722405c93cf0d4279f9342da12c2c825bf0b5bb5ef823c06589f955bf3ea3b04d042c8bb6b1f10094f74d18530b9ad9e01a948aedd438393fae879226ae437dbb3a36e72a24939c2a8741557f78e5f04b461d36e08d76b17f6eccc60e1642b9bfd921cffe75fa376a238d67862a0e6b332b8914284282b891dc508d765e09dccffdcda1f7812780cb462f8991de85e72e004cbdcbd751f3b6ccebf5eea3104b8a63aae57a2d87d9d4a72116ca5f5a17cab23f735cfdd54fa739277900f4c16e7b8c7d0d88719cf4f4954aa37df629b96f0bbc22ac9f314028bde68640ad23f131121139da6f5165ec4239999b2c4783ad08454e006b4a09fb0a143b628d08bbb1ef489d930ddcf597a3e14c5401f56fd5726b26e7cf6876976a6b135a88cccbeb95435e2b2d6f156bf853c58cdbc3976f3218601a8e6487dca613a314e8a3a4830ca8063f6befff586d2f8ed4d4fe804717d4aa0bef39051fdc505f415826afd0c64b02216f8059e2f513e6242ccd8077ec7d2707d451e67cfaf800c6db9eae2913eb732b10563d3c64f22e563ce1a3d269862cc664fbacae4ea9f515f059c3ca60690f4e3f18491fbec29ba2aa8dd3e160472d4d78fa50274cded85878b92f197f500c0101b387ca7f2b6af98082dad3a9aa2bc89ac9071c58daa27dae95a34199b24997703029335fb74c7be8741087dd65e4f88710392fecdfd206472379f853092575bb0a9548885a6ae9be4cc5b5724e0b25e7f7e8002fdc95c1b83ae15f3ad8be97159c64e4ae740c215ce7f2be0b802eeefcc985948d5827aa476561fe5bffbb0a9dfe72f766e2f23bfa5818a491bd2ac2bec5c7483b480ba0d129e5b2976478790931b2fe540a017b6dea82a08671aa0a552fe5e3ec5ad314c7ed0a94946823e908d4e6ddba134b0c61b57eb8bd9ec957535995ebc3f728cc99aa9cde1950b0515a012623efa4296dfbe09509d7a7499cc4f087b7dc84c0a1e5644dbd0330459337b06473b4a464f256e3fc4a9293884e93ca55642b0ca1c9036d42d8915b91ace01b844d4bd26c810395b3a38e577e10f973e6e62f4595ef9c33fe8432b2d0027060f4d04103aa31606eee3c27c656235b0aa1de6ff15b6fbb1cb842328fd68cb2dcec8d4ac34a9bfb61a9ed1b5d854dd865c512cb24c4a9455e2914df356a8e4062a5c7de16e353e1db126a4399f0165497f97d0ba2458f34a61a07fd3f40289fb45d6b29879c0da640ff682dce4c47d18fd92d6967548a4839c617f3d4acd7797a9bee37b1d7aee86f4c3cad0482b24d80a19cf16d2833b006387b60b3ce354752a1f31b42dbfdcb29f1a4b2b35caf8a6f10f2843ee58194abb16b54e9d8b92d1ee37cdbc2a8fd7f75ec3a2a3a3819f51e3d5f6bb56b4080f50d002615ce9894d106ba564952deaaa73fbc6ece1206a88cc9d2e730e85cdac760241c9da5bd294283a5a8baf8407d70156ecb5ff0590cc08831bf295c22ea8f786d9c23d767d6d2c520f9dafaebe295e061fc5e486155b9e93557ed40f9219ea343af64f4f57df1a914ca07a0bd2d65e5f67ac43df1ae79829297b01d3a776bc37563791fbb10e9d071d7769c03dbfa6b9c460855382077b48d47cf49444887902a40dc5561d4366477916588b1724af7d1a812c39990ff0f19466f6c2f144a5d982c580f10b0c088187fe399129bc8bada288b868cfb0e9aed4b16f3ad17b0ec89192b3c65d14d6d74fc85ba536c174c47ecfee42de91302cfd7aed760da7a0a70a25e1340eedbfbf762b6c1dcf5ffbdca9eff7d21e23accdab17f15fc894785490d1f2f7c07ceb0b987109ee43d7fd137cb662a6aadb0fa602a696cedb4bb2d289f10f3380961444cd6141ba306e6ca1af114626b322c36e02daba3fe49356e81cd8e0b388ce9f72517b46e549ee53231ab1d75ee6964d7c86a6ff73ce12bea18b95ac6ae529359d39641e17da96597fb4bc99c6ab5c2c8406322d64710944c9e1c2c8518050d050f50825b34b5e274bb87c61a3dd7a9592f9c661ede0f9b5fd70702a1040c46b6dd3039c35e0a36a491322c7e63b8aa4d93bac572ddc8a5c0a80978b416315879c464d72499ee17190a4765631de5aa6ac6ec5100028d222f402c89d65d9885013a81bf5dcfc026b6b785250060c19078ed549aea71d32e7b1e7e6d24b474943dd82d8d7cd1167afc480c69beb9eb28c144f86c92238ffedb2621a41f5789813dd622c366dc5390f54752d72ae84636c0aff24154aca813e6f030cfad074c48d69d29707a5ea578e1cd5fdf94a3c546bcee65f011492bff095ecf50daaf30fd1a708362b064ad068ab568b9a3c37eead508fce274dc0d11c3341f1331634d7ae3c22b6e0eb8ecf10638ec649ddac1fe425cfca18b8cd3693614107ccb982f70be13373d133c43e591da9b45044f7d9ee95e8d4d744ab9cdac181a41d78f5d891c150a56c94ed8243216a05ea0d49de5d5b193be2b6d218e4169e6acc747545a220c3c7502724d84f3d762e023775ca79e47a9edde620a2dced31f9445c12159a8e8c0fdad763a8df893aa04ea2fc31f7178ff113a948202f4057348cf9ff748adcddaa2cffe4acc36c82515c2086a8c5105750a3431566e119795661819c4322e3356b41e4a9c65de85efade19f420913981c3f6d03963ac1eeec7f5bac7285f033fef4e45eb90d36d4b4f9cb88503b5d34e9f040652fca3f29d65be1bd34b327ab1d18957bb2c73cc448818e639f845b016dcf5c57ee4b82c3c6e79d1ac4c9135a116b061a62159ad131966b350d074928733e6a04583dfe4b3551e366e2c7627f907ecb1da051c8e7d1a6bc9d4215d98f37d09de9d314b25e332566b5e192f53633eee2d15f9649c93000da9ee0ad89be625b53121dad5c0aea03e42fce0374ce816d3bd898becef10", &(0x7f0000000040)="7fe6b6eed63be43db662c0b25f20c5e1b2b783ce3e64013bb18bbab1d4b6ae656b54a521f8a2edab55d207a1c5341fb736a8d6bc6e2b4d2c9f4680d1596cca5d6e9aa3d1f82ce4135f16917845ce3146266237fd131159900837e8272ce589b2936c533cae8a09128644d94235878d44145098e01700840dc93f615118200f14427f3f56319fc61b53d8fa9b76d83f598dabc76218471e81e01c0d018d2935b9b526171a7895a22a432096b646a221c459c221777cc8b23a3170ae2f366f4e9256241b7d06f62054ad83f7385e80b131a0a0825d7f4ed46997aead94d9eb2d"}}, &(0x7f0000000180)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) 10m28.431639081s ago: executing program 3 (id=2336): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x6], [0x400, 0x2, 0x0, 0x0, 0x0, 0xffffffff], [0xfff, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffd]], '\x00', [{0x0, 0x1, 0x1, 0x0, 0x0, 0x1}]}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000580), 0x0, 0x10100, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c000280080007400000000008000340000000160800014000ff00120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002f80)={0x0, 0xffe4, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1, 0x8, 0x1000, 0x1b, 0x0, 0x9, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x7, 0x4) 10m27.479669577s ago: executing program 3 (id=2339): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8806000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8008000}, 0x200080e0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x903, 0x0, 0xffffff80}}) 10m23.661780211s ago: executing program 3 (id=2348): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x75, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, &(0x7f0000000480)=0x1) 10m8.32432659s ago: executing program 34 (id=2348): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x75, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, &(0x7f0000000480)=0x1) 5m33.474673818s ago: executing program 1 (id=3316): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000740)=[{&(0x7f0000000540)="b6"}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xffffff41}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x51}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 5m31.06534097s ago: executing program 1 (id=3322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x8000200f}) epoll_pwait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x65c, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) 5m30.722134237s ago: executing program 1 (id=3323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700cd7916000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780000000000500150000000030437be0cac23ba98f4900d2e63363d0613c98d776e2ef4117766dd77727f7f2af9f0e7083b13fbe57001272db608fcf361519b1519a5068ee69743b4bbc455710280b0fd61a539e29cb0df61307128636ebf254416b02", @ANYRES8=r0], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004841) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x78407a75289338ac) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) r1 = getpid() r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920000905", @ANYBLOB="da05f9"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x8000000000000002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f00000002c0)=0x1000, 0xb, 0x2, &(0x7f0000000300)={r4, r5+10000000}, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) io_uring_enter(0xffffffffffffffff, 0x1733, 0x6323, 0x20, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x0, 0x3, 0x41, @vifc_lcl_ifindex, @rand_addr=0x64010101}, 0x10) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1, 0x9}, 0x90) syz_genetlink_get_family_id$ieee802154(0x0, r7) syz_genetlink_get_family_id$ieee802154(0x0, r7) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5m26.741995435s ago: executing program 1 (id=3331): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x16b, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) select(0x40, &(0x7f00000001c0)={0xff, 0x9, 0x5d7, 0x2, 0x3, 0x0, 0x6, 0x5}, 0x0, 0x0, 0x0) 5m26.643684936s ago: executing program 1 (id=3333): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80800) ftruncate(r0, 0x26c6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x1000000, 0x1b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4840}, 0x20004140) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) clock_settime(0x0, &(0x7f0000000000)={0x2, 0xfffffffc}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, 0x0, &(0x7f0000000080)) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, &(0x7f00000016c0)={0x2020}, 0xfffffce3) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000)) r8 = socket(0x1, 0x3, 0x0) bind$unix(r8, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050026bd7000000002004400000008000300", @ANYRES32=r4, @ANYBLOB="2b748814000501800000"], 0x30}, 0x1, 0x0, 0x0, 0x4005}, 0x40040) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x8, 0x3, 0x3, 0x0, 0x91}) 5m26.614349694s ago: executing program 1 (id=3335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8840) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x180, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7c0, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fffffff, @rand_addr=' \x01\x00', 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1800e2a5}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 5m11.237592741s ago: executing program 35 (id=3335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8840) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x180, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7c0, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fffffff, @rand_addr=' \x01\x00', 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1800e2a5}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 5m2.727214082s ago: executing program 7 (id=3436): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x51c0, 0x0, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x4, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 5m2.463171884s ago: executing program 7 (id=3438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$caif_seqpacket(0x25, 0x5, 0x5) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="76dc9d30", 0x4) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000440)={0x0, 0x40000, 0x4000, 0xfffffffc, 0x238}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}) io_uring_enter(r6, 0x3f70, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x3c}}, 0x8410) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='fsi_master_acf_cmd_same_addr\x00', r10, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) quotactl_fd$Q_SETINFO(r9, 0xffffffff80000601, 0x0, &(0x7f0000000400)={0x6, 0xffff, 0x0, 0x5}) r12 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)="a43a03729067e34a522836d4f2601f635f51bdf6bbe89936749317bcf6d136384801380efe1f00da250468002ed0f4c7ee2a3a8e470e8c3d04842ab1947929eca64e29a669d437d14710be55efd94d2aaf93e5e3c3544b79be4d7206f23f", 0x5e}, {&(0x7f00000005c0)="1f5f43c18a53d521364ac878d4c19eba5810b3368ce04df1fc03d8dc7a51f2e15d757319d38c86436a13f6b5", 0x2c}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32=r11, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r9, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f10000"], 0xb0, 0x40040}}], 0x1, 0x804) recvmmsg(r13, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 5m0.901500234s ago: executing program 7 (id=3440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0xfffffdf9, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m59.747547569s ago: executing program 7 (id=3446): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x16b, &(0x7f0000000000)={0x0, 0x0, 0x13090, 0x2}, 0x0, 0x0) pipe(&(0x7f00000001c0)) select(0x0, 0x0, 0x0, 0x0, 0x0) 4m58.779653299s ago: executing program 7 (id=3452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x2}, 0x0, [0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xffffffff, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x0, 0x80, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x8, 0x0, 0x0, 0x0, 0x9e88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0xad3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa50b, 0x0, 0x0, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x13, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0xb3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\x03\x00<\xb9k', 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x0, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x182, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) ioctl$RTC_AIE_ON(r7, 0x7001) eventfd(0x5) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x4, 0x7}, 0x0) pipe(0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x4, {0xffffff88, 0x1, 0xfffffff9, 0x3}}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r10, 0x11, 0xa, 0x0, 0xfffffffffffffffe) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010400000000000000000000000005000400000000000900020073797a30000000000500010007000006408000000412000300686173683a6e65742c706f727400"/88], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 4m58.565979173s ago: executing program 7 (id=3454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a300000000014000780080012400015000005"], 0x5c}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f0000000100)={'macsec0\x00', 0x1}) accept4(r3, 0x0, 0x0, 0x0) 4m43.017940359s ago: executing program 36 (id=3454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a300000000014000780080012400015000005"], 0x5c}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f0000000100)={'macsec0\x00', 0x1}) accept4(r3, 0x0, 0x0, 0x0) 8.364950322s ago: executing program 8 (id=4457): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0xf0) 7.931684154s ago: executing program 4 (id=4458): r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x8000}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) sendfile(0xffffffffffffffff, r4, 0x0, 0x5) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f0000000100)) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 32) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000500)}, 0x4800) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0xe4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_ife={0xcc, 0x1, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe4}}, 0x0) (async, rerun: 64) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (rerun: 64) syz_usb_control_io(r6, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="20071f000000b842f6300cd1f24b79541539"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) mount$bpf(0x0, 0x0, 0x0, 0x10404, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0xfffffffffffffff9}}]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0x541b, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @private, @broadcast}, &(0x7f00000001c0)=0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r11, 0x0, 0xff}, 0x18) 7.719740219s ago: executing program 4 (id=4459): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x20000000000001, 0x0, 0x2, 0x0) mmap(&(0x7f000080f000/0x4000)=nil, 0x4000, 0x300000b, 0x4000010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0xb, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, 0x0) sendfile(r2, r3, 0x0, 0x80000000) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000002dc0)=[{{&(0x7f00000002c0)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/166, 0xa6}, {&(0x7f00000005c0)=""/95, 0x5f}, {&(0x7f0000000640)=""/195, 0xc3}], 0x6}, 0x81}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000002d80)=""/55, 0x37}, {&(0x7f0000000840)=""/157, 0x9d}, {&(0x7f0000000900)=""/201, 0xc9}, {&(0x7f0000001a40)=""/202, 0xca}, {&(0x7f0000001b40)=""/102, 0x66}], 0x5, &(0x7f0000001c40)=""/91, 0x5b}, 0x7}, {{&(0x7f0000001cc0)=@qipcrtr, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/170, 0xaa}, {&(0x7f0000000400)=""/24, 0x18}], 0x2, &(0x7f0000001e80)=""/207, 0xcf}, 0x2f6c}, {{&(0x7f0000001f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002080)=""/206, 0xce}, {&(0x7f0000002180)=""/231, 0xe7}, {&(0x7f0000002280)=""/94, 0x5e}], 0x3, &(0x7f0000002300)=""/236, 0xec}, 0x4}, {{&(0x7f0000002400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002480)=""/182, 0xb6}, {&(0x7f0000002540)=""/186, 0xba}], 0x2, &(0x7f0000002640)=""/213, 0xd5}, 0x5}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002740)=""/74, 0x4a}, {&(0x7f00000027c0)=""/48, 0x30}], 0x2}, 0x5}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002840)=""/131, 0x83}, {&(0x7f0000002900)=""/194, 0xc2}, {&(0x7f0000002a00)=""/251, 0xfb}, {&(0x7f0000002b00)=""/137, 0x89}, {&(0x7f0000002bc0)=""/45, 0x2d}, {&(0x7f0000002c00)=""/177, 0xb1}, {&(0x7f0000002cc0)=""/63, 0x3f}], 0x7, &(0x7f0000002d80)}, 0x40651015}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) 7.316203675s ago: executing program 8 (id=4462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x41045508, &(0x7f0000000000)={0x1, 0x10000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = inotify_init() r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r6}, 0x14) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@delqdisc={0xbc, 0x25, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0x0, 0xb}, {0xfff3, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0xfffffffffffffdd4, 0xe, 0x7}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x8, 0x3b19, 0x0, 0x40, 0x800, 0x2}}, {0x8}}, {{0x1c, 0x1, {0x7f, 0x6, 0x26, 0xfffffffd, 0x1, 0xcb, 0xff, 0x1}}, {0x6, 0x2, [0x5f]}}, {{0x1c, 0x1, {0x7, 0x1, 0x7, 0x80, 0x1, 0x0, 0x6, 0x5}}, {0xe, 0x2, [0x8001, 0x0, 0x3ff, 0x23dd, 0xfffe]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfe00000}]}, 0xbc}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) r9 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000480)=ANY=[@ANYBLOB="3e85bcaecfcfa12c2503500000b2706a49fbd960"], 0x9, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, &(0x7f0000000440)=@secondary) close_range(r2, 0xffffffffffffffff, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0c63470518e0769502effcb0ce8f1400000025"], 0x14}}, 0x20000804) 6.632200376s ago: executing program 8 (id=4463): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet(0x2, 0x6, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x2000004) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, 0x0, 0x4040810) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='syzkaller1\x00', 0x10) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0xc004880) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r11 = userfaultfd(0x80000) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x110, &(0x7f0000000080)=0x80000001, 0x0, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000687000/0x4000)=nil, &(0x7f0000ac1000/0x2000)=nil, 0x4000}) 6.281063436s ago: executing program 4 (id=4464): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001b00), 0x8a201, 0x0) writev(r3, &(0x7f0000001e80)=[{&(0x7f0000000100)="1a7a", 0x2}], 0x1) io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpeername(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x130c17, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000380)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 4.879845407s ago: executing program 4 (id=4470): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000240)={0x0, 0x1, 0x6fc0}) io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x8e180, 0x900) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0x7, 0x4) 4.565139107s ago: executing program 0 (id=4471): syz_pidfd_open(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x818}, 0x20000804) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCSETS(r2, 0x8926, &(0x7f00000000c0)={0xfdfd, 0x0, 0x0, 0x81, 0x0, "5dee130300"}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000240), 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x7, 0x1}) r3 = socket(0x2, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/210, 0xd2, 0x7) r6 = getpid() mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'local'}}}]}) r7 = getpgrp(r6) ptrace(0x11, r7) 4.505733892s ago: executing program 8 (id=4472): ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x1, r0, 0x0, &(0x7f0000000180)="446fd3b67ef26154e4d931052c0d3c5af4e933216455c7a9a5ab97ad42e00e122c0af9757b4407240bd6bacf0d6ea1efaf04f3c21c43ccc885fb5f7ff9c416391075bee871093c91c3d15e6df84921595bfe636a33aaa00b6e2a60efa8111a4b1eb59dbabc6b01de90", 0x69, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x545d, &(0x7f0000000340)) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0xff9a) connect$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x8010083, 0x400000, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r8, 0x0, 0xcf, &(0x7f0000000280)=0x1, 0x4) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000080)={0x28, 0x0, r9, 0x0, 0x0, 0x0, 0xffffff7f}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000100)={0x28, 0x2, r9, r0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) 4.47056709s ago: executing program 6 (id=4473): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000020000feffff7f0040000000d96e6c8d5e8508"], 0x34}], 0x1, 0x0, 0x0, 0x80}, 0x0) 3.854907689s ago: executing program 0 (id=4474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000000c0)={0x40000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0xffffffffffffffee, 0x1ff, 'syz0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x4) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r11, 0x400, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) 3.747889739s ago: executing program 6 (id=4475): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x100000000008) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65dd}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000280)={0x18, 0x1, 0x1, 0x0, r1, 0x4e246dc8}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYRES8=r2], &(0x7f0000000140)='GPL\x00', 0x42f, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback=0x1e, r3}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', r7, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0\x00') ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x780, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {}, {}, 0x1, 0xdd, 0x4, 0x0, 0x1, 0x4, 0xb, 0x3, 0x1ff, 0x3d, 0x2, 0x40003, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r4, 0x0, 0xffff}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000004, 0x32, 0xffffffffffffffff, 0x2d568000) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f0000000180)={{@any, 0xffffffff}, 0x0, 0x1}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0, 0xffffffffffffffff, 0x80000}, 0x18) 3.639998283s ago: executing program 9 (id=4476): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="18020000eaff000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x4048010) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001900)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f000001c700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r1, &(0x7f0000000440)=[{{&(0x7f0000000240)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000004c0)="c3035e73c79eda184143fc007c7f1f46ed89686e06001dab3ed3263c8da45342455118631913eb364bfaca8ac988687725be8d778bfae86f6c928e038c6d2ac1d19db566c01bb03279f9432b65b32e6eb82939ff500042c595a4be1dc853cf60153646110045bb91af31847a539619686e38438eca700adace9504cb259f5635238612fa8894a9d0bdb0dab864f386284a2106a35652a5b3220620c743694806124be93a0f633f5b45c73439b064d33d4ff58055f938580764", 0xb9}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000580)="e858f8c98b93c17b47cfd3b894daf76b8299a531e5bbc936f3926dd88252d22309342d71ec528959b012ed196d82d4d6012721d0f703df3a1b5a5553b89c01b03d82f810a61d90c66ad69aa8f8f54f1a895773a53dacd1a224774e", 0x5b}, {&(0x7f0000000100)="217f35c7f375ed7a8d80a94b42f1cce95a69a699a72ea391ff9d69f149a0f9064944fb402ca8f6", 0x27}, {&(0x7f000001b700)="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", 0x1000}, {&(0x7f0000000640)="bcefee6a3beb72facf5116714d7af781f7fe34bc75585c8d0c3d9fadbcb604e4c3117d0bfe3ca91987ab53cd3bb14d3c2d3a131c2df555fabf2d746e976714ace58a77485c67ce37e6ef8c06feb99726dcd0babe657e17c3e62f40327d38d3209c456feb5688b45fb087", 0x6a}], 0x6, &(0x7f00000007c0)=[@rights={{0x2c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r0, r7, r1, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x50, 0x4000}}], 0x1, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000003d80)={r13}, &(0x7f0000003dc0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x8, r13}, 0x10) 3.625079698s ago: executing program 6 (id=4477): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x10) unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800430010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 3.035749211s ago: executing program 8 (id=4478): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x1c1040, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) fcntl$setpipe(r1, 0x407, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r2, &(0x7f000001b080)={0x7, 0x1ff, 0x0, 0x7}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6}, 0x38) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername$inet(r7, 0x0, &(0x7f00000001c0)) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) ioctl$SIOCAX25CTLCON(r8, 0x89e8, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0xa, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @default]}) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000080)) 2.910085308s ago: executing program 0 (id=4479): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xe000003, 0xdf5, &(0x7f0000002540)=[0x5, 0x9, 0x5, 0x4, 0x8, 0x7ff, 0xd, 0x4, 0x80000001, 0x10001, 0x8000, 0x673, 0x5, 0xc518, 0x6, 0xffff97e8, 0xf1, 0x31, 0x18d247d, 0x1, 0x1, 0x1, 0x7, 0x8001, 0xffffffff, 0x0, 0x2, 0x352, 0x8b, 0x5, 0x1, 0x1, 0xb, 0x1, 0x5cec, 0x35a, 0x1, 0x0, 0x7ff, 0x8, 0x9, 0x9, 0x7f, 0x8, 0x1, 0x80000000, 0x3, 0x6, 0x4, 0x3, 0x10, 0x1, 0x0, 0x8, 0x2, 0xff, 0x0, 0x200, 0x3ff, 0x4457, 0x3, 0x8740, 0x80000000, 0x401, 0x8001, 0x8, 0x9, 0x0, 0x43b, 0x4, 0x1, 0xffff, 0x2, 0x3, 0xb, 0xfff, 0x4, 0x8, 0x4, 0x4, 0x6, 0x2800, 0x8001, 0x6, 0xc, 0x252, 0x5, 0x1, 0xffffffff, 0xbb45, 0x0, 0x8, 0x60000000, 0x2, 0x6, 0x8, 0xc, 0x8, 0x10001, 0x4, 0x7, 0x0, 0x3, 0xb2a, 0x1, 0x7, 0x25f5, 0x3, 0x7, 0x7, 0x433e, 0x3, 0x8, 0x6, 0xfffffff7, 0x5, 0x0, 0x6, 0x5, 0xa02, 0xf097, 0x5, 0x6, 0x6, 0x2, 0x8, 0x4, 0x0, 0x585f, 0xe, 0x6, 0x4, 0x6680a90a, 0x5, 0x965, 0x10001, 0x5f1, 0x800, 0x7, 0x4, 0xd0, 0x2, 0x0, 0x8, 0x9, 0x5, 0xfff, 0xb238, 0x3, 0xfb65, 0x0, 0x401, 0x8, 0x80, 0x2, 0x0, 0x800, 0x8, 0x80000001, 0x4, 0x0, 0x0, 0x2, 0xeb, 0x9, 0xfff, 0x2, 0x0, 0x2, 0x45, 0x1, 0x180000, 0x3, 0x7, 0x1ff, 0x9, 0x800, 0x4, 0x80, 0xffff, 0x6b, 0x0, 0x3, 0xffff88bd, 0xd620, 0x4, 0x80000001, 0x1, 0x0, 0x4, 0x800, 0x7, 0x3, 0xd, 0x6, 0x2, 0x1, 0x5, 0x7bfe, 0x3, 0xf0, 0xfffffa12, 0xce84, 0x2, 0x3, 0x80, 0x1, 0x3f510eda, 0x2, 0x8, 0x6, 0x6, 0x4, 0x5d, 0x400, 0x21b9, 0x1, 0x0, 0xe, 0xa, 0x8, 0x5, 0x7, 0x100, 0x0, 0xa, 0x0, 0x0, 0x7, 0x7, 0x21c, 0xd93d, 0x73d, 0x7f, 0x3, 0x8, 0xc6b7, 0x1000, 0x6957, 0x4, 0x2, 0x6, 0x8, 0x9af, 0x3, 0x7, 0x1, 0x1ff, 0x0, 0xde5, 0xfffffffe, 0x1, 0x6, 0xffff8001, 0x10, 0x9, 0x0, 0xc87c934, 0xdc68, 0x0, 0x22, 0x4, 0x10, 0x5, 0x5, 0x3, 0x10001, 0x2, 0x6, 0x9, 0x1, 0x6, 0x99b, 0x9, 0x8000, 0x6, 0x7, 0x6, 0x80, 0x9, 0x8001, 0x7f, 0x7f, 0x1, 0x7, 0xca5, 0x4, 0xa, 0x6fab, 0xfff, 0x5, 0x1, 0x3, 0x4a, 0x5, 0x1, 0x42c8, 0xd, 0x6, 0x7, 0x0, 0x3, 0x10000, 0xfffffffd, 0x8, 0x9, 0x12ae, 0x8260, 0x8, 0x3, 0x2, 0x5, 0x3, 0x9, 0x8, 0x5, 0x5, 0x10001, 0x0, 0x9, 0x7, 0x0, 0xf4, 0x1bfef0ab, 0x3, 0xffffffc0, 0x6, 0xfa9b, 0x3, 0x80000000, 0x4, 0xaec, 0xa0c, 0x2, 0x3b, 0x9, 0x0, 0x8, 0x8, 0x6, 0x2, 0x2, 0x2, 0x2, 0x2b3, 0x30a, 0x10000, 0xb, 0x3, 0x0, 0x87f, 0x9, 0xae9d, 0x9, 0x0, 0x0, 0xaccb, 0x0, 0x3c0f, 0x87de, 0x8, 0x1, 0x8, 0x0, 0x8, 0xc0000, 0xffffffff, 0x101, 0xfffffffe, 0x5, 0x5, 0x1, 0x1, 0x2, 0x9, 0x10000, 0xda6, 0x5, 0xfffff801, 0x0, 0x3, 0x4, 0x6, 0x4, 0x1, 0x1e07267b, 0x9, 0x9, 0xc, 0x7, 0xffffa9dd, 0xfffff8f7, 0x5, 0x4f, 0x3, 0x3, 0x270, 0x5, 0x0, 0x8, 0x7, 0x1, 0x10001, 0x3, 0x2, 0xe, 0x7, 0xfffffffd, 0x4, 0x2, 0x3, 0x7f, 0x2, 0x8001, 0x2, 0x18, 0x0, 0x5, 0x800, 0xfffffbff, 0x9, 0x78, 0x4, 0x976, 0xb2, 0x8000, 0x3, 0x4, 0x6, 0x10001, 0x3, 0x81, 0x9, 0x5, 0xf3, 0x74e, 0x8, 0x2, 0x1, 0x4, 0x5665bfa1, 0x8044, 0x72, 0x7, 0x9, 0x3, 0x401, 0x4, 0x101, 0x8000, 0x3, 0x4, 0xc71, 0x4, 0x3, 0x10, 0x7bd2cae5, 0x8, 0x5, 0x0, 0x7fffffff, 0x9, 0x5, 0x9, 0x4, 0x0, 0x9, 0x7f, 0x6, 0x6, 0x0, 0x7, 0x0, 0xff, 0x9a3, 0x8a8, 0x1, 0x2, 0x4, 0x3, 0x1, 0x4, 0x101, 0x0, 0x4, 0xcfc, 0xfff, 0x0, 0x3, 0xfffffff7, 0x80000001, 0x5, 0x3000, 0xfffffffd, 0x7, 0x3cb, 0x5, 0x3, 0xd29, 0x8, 0x2, 0x3, 0x0, 0x2, 0x3, 0x1, 0xfffffffa, 0x401, 0x7, 0x62, 0x0, 0x3, 0xe24, 0xfffffffc, 0x8, 0x9, 0x4, 0xfffffff7, 0x7bd, 0xd, 0x9, 0x8, 0x6, 0x9, 0xfffffffd, 0x80, 0x2d4, 0x6, 0xa8, 0x800, 0xbe9, 0xfdf, 0x4f0, 0xff, 0x10001, 0xffff8000, 0xfff, 0x9db, 0x0, 0xe37a00, 0x6, 0x7ff, 0x8, 0xa00, 0xf, 0x80000000, 0x1, 0xe, 0x200, 0x8, 0x6dda, 0xd38, 0xffffffca, 0x4182, 0x2a0, 0x8001, 0x7, 0xd8d, 0x4, 0x4, 0x9, 0x6, 0xff, 0xfffffffa, 0x4, 0x3, 0xc89a, 0x3, 0x1, 0x2, 0x10001, 0x76, 0x0, 0x5, 0x5, 0x9, 0x9, 0x3, 0xe7, 0x96, 0x5, 0x1000, 0x100, 0x4, 0x2, 0xfffffffd, 0x0, 0x7fff, 0x4, 0x9, 0x9, 0x23b, 0xfffff420, 0x0, 0x100, 0x1, 0xc66, 0x5, 0x5, 0x3, 0x6, 0x8, 0xa, 0x1, 0x2, 0x5, 0xb1, 0x8, 0x575, 0x5, 0x7, 0x3, 0x7, 0x7c, 0x3, 0x5, 0x7, 0x8, 0x3, 0x4, 0xf, 0x1, 0x3, 0x6, 0x4, 0x5, 0x4, 0x6, 0x9, 0x7fffffff, 0x8, 0x101, 0x0, 0x10, 0x49a, 0x4, 0x81, 0x10000, 0x0, 0xa, 0x2, 0x0, 0x7df4, 0x6, 0x9, 0x7fff, 0x6, 0x9, 0x4, 0x3, 0x6, 0x4, 0x6, 0x9e4, 0x26, 0x2637e011, 0xb, 0x6, 0x6, 0x3, 0x221, 0xfffffffe, 0x6, 0x1a, 0x3d, 0xfffffffb, 0xfffffffe, 0x5, 0x8001, 0xffff, 0x0, 0x3, 0x4, 0x1, 0x5, 0x9, 0x5, 0x81, 0x7, 0x80000000, 0x3, 0x6, 0x4, 0xfffffff9, 0x80000001, 0x101, 0x6, 0x5, 0x10000, 0x1000, 0x8, 0x3, 0x1, 0x6, 0x3, 0x1, 0x9, 0x49, 0x0, 0x80000001, 0x7fff, 0x4000, 0x8dc, 0x2, 0x5, 0x2, 0xe00, 0x9, 0xa, 0xfffffffb, 0x8, 0x7ff, 0xd, 0x9, 0xd, 0x4, 0x0, 0x4, 0xe, 0x3, 0x7, 0xb, 0x9, 0x7, 0x7fff, 0x9, 0x5, 0x66, 0x0, 0x174d, 0x3, 0x72, 0x7, 0xb, 0x10, 0x7fffffff, 0x1, 0x6, 0x2, 0x84a, 0x401, 0x1ff, 0x8, 0xffffffff, 0x1, 0xd737, 0x4, 0x9, 0x8, 0xfffffff9, 0x5, 0x226, 0xa, 0x4, 0x7, 0x3, 0x40, 0x2, 0xfff, 0x4, 0x5, 0x5, 0xd, 0x2, 0x401, 0x822, 0x8, 0x6, 0xfffffff0, 0x6, 0x61, 0x9, 0x3, 0x10001, 0x200, 0x2, 0x2, 0x9, 0x10, 0x1777, 0x6, 0x2, 0xc0000000, 0x2, 0xffffffff, 0x80000001, 0x1, 0x1, 0x4, 0x7fffffff, 0x5f5d, 0x70, 0x1, 0x7, 0x7fff, 0x101, 0x40, 0xf02a, 0x3, 0x5, 0x9, 0x5, 0x0, 0x0, 0x9, 0xffff, 0xc6, 0x7, 0x3a2b, 0x2, 0x8, 0x7, 0x6, 0x8001, 0x380000, 0x5, 0x5, 0x7a, 0x8, 0x65d, 0x2e64, 0x100, 0x9, 0x7, 0x5, 0x3, 0x7ff, 0x1, 0x8, 0x7, 0x0, 0x6b, 0xd37, 0xe0, 0x3ff, 0x10001, 0x10000, 0x3, 0xe, 0x9, 0x2, 0x3, 0x7d74, 0x7, 0x7fffffff, 0x3, 0x1366, 0x6ba7, 0x1, 0x4, 0x8, 0x4, 0x200, 0x0, 0x5, 0x7, 0x116, 0x80000001, 0x7bf, 0x80, 0xa48, 0x4, 0x0, 0x5, 0x36, 0x3, 0x4, 0x8c, 0xd, 0xd8f, 0x69, 0x8, 0xc, 0x1190, 0x3, 0xeb, 0xb, 0x9, 0xc0000000, 0x1ff, 0x1bc0e401, 0x8, 0x0, 0x605, 0x7fff, 0x9, 0x93, 0x0, 0x400, 0x8, 0x5, 0x4, 0x368d0836, 0xfffffe00, 0x9, 0xc19, 0x10000, 0xe, 0x5, 0x6, 0x5, 0x4, 0x2, 0xa290, 0x8, 0xc, 0x3, 0x1, 0x4, 0x25, 0x3ff, 0xfffffffa, 0x41, 0x101, 0x4, 0x9, 0x80000001, 0x4, 0x7, 0x400, 0x200, 0x4, 0x1, 0x6, 0x9, 0x4, 0x8001, 0xb55, 0x6, 0x3c, 0xf, 0x8, 0x2, 0xfffffff9, 0x86, 0xffffffff, 0xfff, 0xdef, 0x7, 0x81, 0x8, 0x4, 0x56cebf46, 0xff, 0x200, 0x6, 0xf, 0x9, 0x8, 0x2, 0x3, 0x7523, 0x43b1, 0x3, 0x4, 0xa2d1, 0x81, 0x0, 0x4, 0x1, 0x5, 0x400, 0x4, 0x6, 0x2, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x8, 0x353, 0x0, 0xe, 0x5, 0x101, 0x6, 0x2, 0xf, 0x8, 0x1, 0x2, 0xc8, 0x307, 0x5be800, 0x400, 0x10001, 0x8, 0x6, 0x9, 0x5, 0x9, 0x9b, 0x6, 0x7ff, 0x83, 0x7, 0x1, 0x5, 0x100, 0x8, 0x1, 0xffffff81, 0x1, 0x5, 0x2, 0x5, 0x100, 0x800, 0xf, 0x6, 0x9, 0x0, 0xffff8000, 0x10, 0x6, 0x7ff, 0x3, 0x3, 0x8, 0x8c9, 0x4, 0x34dc, 0xffff, 0x8b17, 0x7, 0x5, 0x7, 0x7fff, 0x7, 0xa, 0x8, 0xe, 0x693, 0x30, 0x6, 0x7, 0x3ff, 0xbe3a, 0xfffffffe, 0x8000, 0x400, 0xfffffffc, 0x4, 0x80000001, 0xfffffffb, 0x5, 0x4, 0x9, 0x5, 0xa, 0x6, 0x7, 0xb20, 0x5, 0xacb, 0x7, 0xffffffff, 0x10, 0x0, 0x1, 0x0, 0x4, 0x80, 0x3, 0x8, 0x4, 0x2, 0xfffffffb, 0x6, 0x1, 0x5041, 0xc7, 0x200, 0x9, 0x2, 0x1, 0x0, 0x8, 0x10001, 0x6, 0x0, 0x80000001, 0x5, 0x6, 0x0, 0x0, 0x1, 0x5, 0x9, 0x4, 0x8, 0x2, 0x1edd1e0f, 0x8000, 0xffffffff, 0x6, 0x9, 0x80000001, 0x1, 0x8, 0x7, 0x24000, 0x3, 0x0, 0x101, 0x2d7, 0x487d, 0x8, 0xfffffffe, 0x5, 0x40, 0x6de, 0x8, 0x1, 0x5, 0x9, 0xfffffefe, 0x1, 0x0, 0x7, 0x2, 0x7, 0x81, 0x0, 0x6, 0x5, 0x90, 0xffffffc9, 0x8, 0xfffffffb, 0x4, 0x7, 0x0, 0x2, 0x2, 0x8, 0x5, 0xd, 0xffffffff, 0xffff, 0x1, 0x6, 0x526, 0x6, 0x2, 0x1, 0x7, 0xd, 0xe, 0x0, 0x6, 0x9, 0x9, 0xf, 0x1, 0x3, 0x2, 0x2, 0x5, 0xfff, 0x100, 0x64, 0x8, 0xa82f02bc, 0x9, 0x6, 0x80, 0x7fffffff, 0xa9a, 0x0, 0x5, 0x9, 0x1, 0x7fffffff, 0x1, 0x8, 0x6, 0x0, 0x6, 0x6, 0x4, 0x10, 0x4, 0x8, 0x0, 0xfffffffa, 0x5, 0x1, 0xdd7, 0x0, 0x33dd, 0x6, 0x3, 0x3, 0x4, 0x0, 0xfffff801, 0x2, 0x5fb, 0x5, 0x1, 0x3, 0x5, 0x65ef, 0xff, 0x8e3, 0x898, 0x81, 0x4, 0x91f, 0x7, 0xbd7d, 0x3ff, 0x800000, 0x7, 0x3, 0x121c, 0xf8, 0x77, 0x7, 0x6, 0x1, 0x0, 0x6, 0x4, 0x3, 0x4, 0x400, 0x4, 0x80000001, 0xfffffff7, 0x10, 0x8, 0xfffffffd, 0x5, 0x2, 0x3, 0x10, 0x2, 0x3, 0x4f7c, 0xae, 0x5, 0x0, 0x0, 0x2, 0x1, 0x4, 0x1, 0xff, 0x5, 0x7, 0x10001, 0x3, 0x2e59, 0x8, 0x0, 0xdc4, 0x2, 0x9, 0xc6, 0xfffffffd, 0xffff, 0xa, 0x2da0, 0x7ff, 0x0, 0x401, 0x7, 0xffffffff, 0x8, 0x5b762e00, 0xb, 0xe, 0x7fffffff, 0x308a, 0xfffff000, 0x4, 0x5, 0x80, 0x8, 0x7, 0x1, 0x0, 0x80, 0x81, 0x6, 0x6, 0xc, 0xa933, 0x89f1, 0x1, 0xe18c, 0xffffffff, 0x8, 0x6, 0x8, 0x1, 0x7ff, 0x6, 0x9, 0x5b2d, 0x3, 0x2, 0x6, 0x3, 0xff, 0x10001, 0x8000, 0x2, 0x2, 0x6c, 0x3ff, 0x6, 0x80, 0xa, 0x3, 0x9, 0x2, 0x5, 0x2, 0x6, 0x4, 0x7, 0x23b, 0xfffffbfd, 0x1, 0x3, 0x80, 0xd, 0x7000000, 0x2, 0x4, 0x100, 0x8, 0x786f, 0xffff, 0x10001, 0x2, 0xd, 0x8, 0x8, 0x7, 0xb2fb, 0x1, 0x7ff, 0x200, 0x6, 0x3, 0x6, 0xd9, 0x0, 0x4, 0x0, 0xf0, 0x0, 0x6, 0xf, 0x3, 0x2, 0x1, 0x3058, 0x4, 0x4b, 0xf, 0x6, 0x5, 0x2, 0x9, 0x3, 0xd, 0x10, 0x2, 0xfff, 0xf2f5, 0x4, 0x8e0, 0x19, 0x4, 0x5, 0x7, 0x0, 0x6, 0xfa, 0x40, 0x4, 0x1, 0x6, 0x9, 0x0, 0x7, 0x400, 0x3, 0x5d, 0x0, 0x6, 0xff, 0x4, 0x7, 0xfff, 0xb, 0x8, 0x6, 0x17, 0x80, 0x10, 0x8, 0x7, 0x1, 0x3, 0x4377, 0x4, 0x8, 0x9, 0xff, 0x0, 0x5, 0x40, 0x7, 0x0, 0x4, 0x5, 0x81, 0x5, 0x7f, 0x7, 0x2, 0x5, 0x7f, 0xfffffff8, 0x7, 0xc3, 0x6, 0x5, 0x66c, 0x0, 0x8, 0x2, 0x0, 0x401, 0x8, 0x7, 0x9, 0x6, 0x5, 0x8001, 0x0, 0x3, 0x98bf, 0x2, 0x8, 0xd, 0x71, 0x8000, 0x3, 0x8, 0x6, 0x8, 0x5898, 0x4, 0x3, 0x1, 0x9, 0xc306, 0x4, 0x6, 0xf, 0x80, 0x8, 0xdbbe, 0x8, 0xc, 0x1, 0x10001, 0x80, 0x3, 0x80, 0xa6fa, 0x6, 0xe04, 0x4, 0x1, 0x2, 0x4, 0x3, 0x8, 0x2, 0x4, 0x80, 0x5, 0xb, 0x5, 0x8, 0x6, 0x7, 0x2, 0x7, 0x101, 0x7, 0x8001, 0xfff, 0x3, 0x7f, 0x6e40, 0x11d, 0x6, 0x5, 0x6, 0x81, 0x2, 0x2, 0x9, 0x3, 0x6, 0x80, 0x3ff, 0x8, 0x40000000, 0x1, 0x7, 0x6, 0x34, 0x3, 0xffffffff, 0x5, 0xff, 0x1, 0x1, 0x4, 0xfeb, 0x6, 0x1, 0xc, 0x4, 0x3, 0x5, 0x10000, 0x4, 0xffffff96, 0x5, 0x8d0, 0x5, 0x5, 0x0, 0x1, 0x1000, 0x6, 0x4, 0x1ff, 0xafe1, 0x8, 0x0, 0x6, 0xffffff01, 0x5, 0x7, 0x6, 0x8, 0xfffffffc, 0xa9, 0x6, 0x7, 0x3, 0x3, 0xe44, 0x5, 0xa0d, 0x9, 0x7fffffff, 0x90c2, 0x3ff, 0x9, 0x800, 0x7, 0x0, 0xffff, 0x4, 0xe3f, 0x10, 0x1, 0x1, 0x0, 0xb, 0x101, 0xa513, 0x5, 0x8, 0x226, 0x8, 0x1ff, 0x6, 0xa8, 0xc1, 0x400, 0x8, 0x1, 0x3, 0xc15, 0x7, 0x135, 0x8, 0xfffffff7, 0x0, 0x5, 0x5, 0x5, 0x9e2, 0x7, 0x80, 0x0, 0x5, 0x5, 0x4, 0x4, 0x80000001, 0x3, 0xf491, 0x69, 0x2, 0x0, 0x8, 0x8, 0x9, 0x4800, 0x3, 0x7, 0x9, 0x1eb2, 0xc000000, 0x2, 0xe14, 0x3, 0xff, 0x3, 0x8, 0x5, 0x7ff, 0x98, 0x4dc, 0x2, 0x7, 0x0, 0x8, 0x200, 0xefff6da1, 0xfffff000, 0xd6, 0x10, 0x2, 0x3, 0x6a0d, 0x9, 0x4, 0xffffffff, 0x710, 0x5, 0xfffff1cc, 0x7, 0x3, 0x9, 0x2, 0x2, 0x3, 0x9, 0x4, 0x6, 0x9, 0x8, 0x9, 0x7, 0xfc45, 0x3e8f, 0xf, 0x6, 0x1f5, 0x1, 0x6, 0x4, 0x5000, 0xa1b0, 0x63fee655, 0x5, 0x7, 0x3, 0x3ff, 0x1, 0x4f800000, 0x1, 0x6, 0x8, 0x3, 0x40, 0x5, 0x8, 0x8, 0x7fffffff, 0x8000, 0x200, 0x1, 0x5, 0x0, 0x8001, 0x6, 0x7fff, 0x6, 0x6, 0x1, 0x81, 0x6, 0xbb7b, 0x3, 0x81, 0xfffffdc0, 0x561253ae, 0x5b1314eb, 0x5, 0x6, 0x4, 0x3fcbee01, 0x6, 0x0, 0x9, 0xe7, 0x4, 0xfffffffe, 0x9, 0x81, 0x9, 0x4, 0x9, 0xf9f1, 0x6, 0x363, 0xaf0b, 0x4, 0x262e91ef, 0x7ff, 0x18000000, 0x0, 0x9b233afd, 0x10001, 0x3, 0x15000000, 0xa3c, 0x1, 0x0, 0x7, 0x2, 0xffffff80, 0x1ff, 0x40, 0x7, 0x8, 0x8001, 0x9a2d, 0x3c, 0x7, 0x9, 0xffffff81, 0x8, 0x92c, 0xd, 0x0, 0x8, 0x7d7b27ac, 0x81, 0x7, 0xfffffff5, 0x6, 0x7fff, 0x200, 0x9, 0x3ff, 0x5, 0x4, 0xfffffbff, 0x5, 0x830a, 0x9, 0x3, 0xc, 0x5, 0x8, 0x6, 0x0, 0x7ff, 0x401, 0x8001, 0xe, 0xfffffffb, 0x9, 0xa, 0x7, 0x4, 0x0, 0x2, 0xb3f9, 0xfff, 0x40, 0x0, 0x9, 0x5, 0x5, 0x7, 0x7, 0x44c, 0x7, 0xfffffc00, 0x200, 0x6, 0x82, 0x4, 0x8, 0x80000001, 0x1, 0x3, 0x6, 0x40, 0x0, 0x3, 0x4, 0x3, 0xa, 0x2, 0x1, 0x4, 0x4, 0x7, 0x1e4, 0x7, 0xd2b4, 0x3ff, 0x2, 0x5, 0xf, 0x305, 0x3, 0x1, 0x4b, 0xfffffffd, 0xffffffff, 0x9, 0x3, 0x8, 0x85, 0x3, 0x2, 0xbf04, 0xd, 0x1, 0xfffffffb, 0x1, 0x0, 0xeb, 0x280, 0xc49c, 0x71f, 0x5, 0x2, 0xfff, 0x31b, 0x8, 0x0, 0x6, 0x200, 0x1, 0x7, 0x5, 0xff, 0xa5a8, 0x849, 0x5, 0x8000, 0x3, 0x95, 0xc6, 0x5f, 0x14dc0000, 0xffffffff, 0xfff, 0xa, 0x7fffffff, 0x0, 0x7, 0xdfe1, 0x3, 0x7, 0x1, 0x6, 0x2, 0x0, 0x8, 0x9, 0x2, 0x7, 0x80000000, 0xf2eb, 0x8, 0x8, 0x6, 0x80, 0x6, 0x5, 0x8, 0x160c, 0x7f, 0x9, 0x64, 0xe65, 0x9, 0x1000, 0x3ff, 0xc1, 0x9, 0x8, 0x3, 0xc6de, 0x7, 0x7, 0xffffffff, 0x3ffc0000, 0x9, 0x3, 0xdc, 0x0, 0x8, 0x3, 0x3, 0x8, 0x7, 0x9, 0xa, 0x4e, 0xfffffffa, 0x8e3, 0x3ff, 0x4, 0x8, 0x9, 0x200, 0x731, 0x5, 0x9, 0xd, 0x101, 0x54d, 0x1, 0x3ff, 0x7, 0x3, 0xb2aa, 0x94, 0x6, 0x1, 0x4, 0x0, 0x3, 0x0, 0x3, 0x3, 0x200, 0x1, 0x2, 0x7, 0x3ff, 0x9, 0x9, 0x9, 0x2, 0x6, 0xa9, 0x1, 0x9, 0xfffff067, 0x3, 0xfffffff6, 0x6, 0x7, 0xb49, 0x5, 0x7, 0x7, 0xfffffffc, 0x8, 0x6, 0x4, 0x7, 0x6, 0x78, 0x1f, 0x1, 0x2, 0x40, 0x2, 0x2, 0x4, 0x5, 0xa213, 0x4, 0x3, 0xffffb305, 0x9, 0x8, 0xcf0, 0x2, 0x40000000, 0x1, 0x0, 0x76f9, 0x4, 0x2, 0x3, 0x80000000, 0xc, 0x7, 0x1, 0xfff, 0x1, 0x0, 0x62d, 0x7, 0x4, 0x0, 0x0, 0x6, 0x5, 0x5, 0x7fffffff, 0xffffffff, 0x0, 0x401, 0x4, 0x2, 0x2, 0x200, 0x0, 0x19ab, 0x4, 0x1ff, 0xa81, 0x5, 0x2, 0x1, 0x55, 0x1, 0x101, 0x7, 0x0, 0x7fffffff, 0x8000, 0x200, 0x9, 0x5, 0xaf, 0xfffffffc, 0x4, 0xd12, 0x5, 0x3, 0x6, 0xc, 0x0, 0x38e1502e, 0xa0000000, 0x0, 0x4, 0x8, 0x4, 0x3, 0xfffffffe, 0x9, 0x762, 0xd, 0x4, 0x0, 0x9, 0xc, 0x7, 0x0, 0x3, 0x1, 0x81, 0x3, 0x5, 0x8, 0x2e37, 0x9, 0x1, 0x68d7, 0x5, 0x6, 0x10, 0x7, 0xb, 0x8, 0xfffffffa, 0x7fffffff, 0x7, 0xffffffff, 0x9, 0x2, 0x29, 0x7, 0x4, 0x9, 0x8, 0xe, 0x8, 0x0, 0x400, 0x3, 0x6, 0xf37d, 0x7fff, 0x4e9, 0x5, 0x2, 0x9, 0x7, 0x101, 0x1, 0xfffffffe, 0x0, 0x7, 0x1ff, 0x8a5, 0x83d1, 0xfff, 0x5, 0x9, 0x2, 0x0, 0x3, 0x400, 0xb452, 0x7, 0xe, 0x4, 0x2, 0xff, 0x8, 0xe, 0x1, 0xe, 0x5, 0x8, 0xffff, 0x1, 0x2, 0xffffff6c, 0x4, 0x4, 0x7, 0x7fffffff, 0xff, 0x6, 0x4, 0x5, 0x6, 0x4, 0x9, 0x4, 0x7, 0x4, 0x7, 0x2c3bc3af, 0x7fff, 0x200, 0x7, 0x8, 0x7, 0x401, 0xffffff7f, 0xff, 0x8, 0x800, 0x140, 0x8, 0x1, 0x0, 0x0, 0x9, 0x7, 0x0, 0x1000, 0x73, 0x8, 0x2, 0xfff, 0x7ff, 0x100, 0x36, 0x5, 0x8, 0x7, 0xbb42, 0x5, 0x8, 0x0, 0xcf466b15, 0x6, 0xe7d3, 0x8, 0x4, 0x10000, 0x6, 0x5, 0xfffffff7, 0x7f, 0x7f, 0x10000, 0xfe, 0x8, 0x748fa271, 0xf, 0x5, 0x8, 0x2, 0x6, 0x2, 0x5, 0x1, 0x0, 0xc8, 0x9, 0x1, 0x5, 0xc8, 0x8000, 0x7551, 0x8, 0xfffffff7, 0x8, 0x28, 0xd, 0x1, 0x1, 0x4757, 0x5, 0x4, 0xb6b3, 0x2877, 0x8, 0x57, 0x6, 0x485bad5a, 0xd63, 0x9, 0x0, 0x96, 0x6, 0xa, 0xfffffff7, 0x3, 0x1ff, 0x1c80, 0x6, 0x7e, 0x1, 0x3, 0xfffffffb, 0x6, 0x4, 0x1, 0x3, 0x7, 0xd767, 0x1, 0x6, 0x9, 0x800000, 0xa, 0x4, 0x8, 0x5ea, 0xa9, 0xffffff6f, 0x613, 0x4, 0x9, 0x9b6, 0xaacc, 0xffffffff, 0x7ff, 0xff, 0x1ff, 0x5, 0x58, 0x1, 0x5, 0x8e, 0x3, 0x5, 0x96c2, 0x5, 0x1, 0xdbe, 0x400, 0x10000, 0x8, 0xa9, 0x1ff, 0x8, 0x7ff, 0x4, 0x8001, 0x9, 0x9, 0xffffffff, 0xf, 0x800, 0x0, 0x4cf1, 0x3, 0xadf2, 0x0, 0xe3, 0x8001, 0x1000, 0x4, 0xc50e, 0x2, 0x54b, 0x8, 0x5, 0xb8d, 0xf56d, 0x8, 0x9, 0x1, 0x0, 0x7, 0x6, 0x5, 0x9da1, 0x4, 0x200000, 0x9, 0x7, 0xa2f, 0x570, 0xffffffff, 0x2, 0xfffffff9, 0xd, 0x5, 0x9, 0x8, 0x6, 0x9, 0x3, 0x9, 0x9, 0xc, 0x10df, 0x7, 0xc, 0x2, 0x3, 0x7ff, 0x8, 0x2, 0x2, 0x2, 0x6, 0xe, 0x10da8cd8, 0x6, 0x8, 0x3, 0xfffffffb, 0xb, 0xb, 0x0, 0xf, 0x6, 0xfffffffc, 0x2, 0x6, 0x401, 0xfffffae7, 0x7, 0x5, 0x4, 0x6, 0x1, 0x6, 0x8001, 0xd, 0x0, 0x8, 0x7fffffff, 0x1ff, 0x5, 0x5, 0x0, 0x2, 0xe22, 0xc50e, 0x400, 0x0, 0x2, 0x0, 0x3, 0x1c000000, 0x7fff, 0x7f, 0x1, 0x5, 0x3ff, 0x401, 0x5, 0x800, 0x9, 0x4e4d, 0x75062a61, 0x7, 0x5, 0x89a, 0x1, 0x3, 0x7, 0x2, 0x1, 0x60000, 0x9, 0x7, 0x0, 0x200, 0x9, 0x7, 0x28a9, 0x6, 0x6e, 0xe, 0x2, 0x4, 0x23e2, 0x7, 0x7, 0x3, 0x800, 0x2, 0x6, 0x7f, 0x1, 0x98, 0x64e, 0x5, 0x8, 0x5, 0x7, 0x2, 0x8, 0x24d, 0x98200000, 0x8001, 0x1, 0xd75e, 0x9, 0x9, 0x9, 0xffffffff, 0x1, 0xfffffffd, 0x9, 0xffffffff, 0x4, 0x6, 0xf6, 0x5, 0x5, 0x4, 0x9, 0x7, 0x8, 0xffffffff, 0x1ff, 0x80000001, 0x6, 0x3, 0x3, 0x8, 0x8, 0x6, 0x4, 0x5, 0xd2, 0x2, 0x9, 0x9, 0x8, 0x1155eefb, 0x8, 0x3ab8, 0x680, 0x8, 0x3, 0x7, 0x7, 0xb49b, 0x1, 0x0, 0x4, 0xff, 0x5, 0x1000, 0x7, 0x5, 0x2, 0x800, 0x84bd, 0x8001, 0x80, 0x4, 0xcb9, 0x4, 0x5, 0x0, 0x0, 0x200, 0xfffff2e5, 0x7ff, 0x7fffffff, 0xc22, 0x4, 0x3, 0x2, 0x1, 0x1, 0x98, 0x2, 0x1, 0x4, 0xb8, 0x200, 0x3, 0x2, 0x5df2, 0x10000, 0xd, 0x2, 0x1, 0x7, 0x1, 0xd, 0x1000, 0x21ed, 0x38000, 0x40, 0xf, 0x80000000, 0x8, 0x4, 0xffff, 0x6, 0x100, 0x1, 0x8, 0x7, 0x3, 0xfffffff7, 0x7, 0x101, 0x1, 0x81, 0x7, 0x3, 0xfffffffa, 0x8000, 0xc, 0x9, 0x9, 0x10, 0x4, 0xa, 0x80000000, 0x4, 0x8, 0x9, 0x3, 0x8, 0x8, 0x5, 0x5, 0x400, 0xffff, 0x9c, 0xc03, 0x9, 0x4, 0x5, 0x8c5f, 0x1c13, 0x1ff, 0x1, 0x1, 0x5, 0x2, 0x7, 0x1, 0x4, 0x5, 0x10001, 0x2, 0x32b8, 0x9, 0x5, 0xf, 0x7f, 0x0, 0x0, 0x101, 0x7fffffff, 0x0, 0x2063, 0x64cc, 0xac3c, 0x7, 0xd1, 0x3, 0x9, 0x4, 0x2, 0x4, 0xffff, 0x2a, 0x101, 0x0, 0x7, 0xfffffff8, 0x3, 0x6, 0xfffffff7, 0x99b5, 0xffffffff, 0x9ee, 0x4, 0x3, 0x6, 0x4, 0x80000000, 0xa00, 0x8, 0x8, 0xbcba, 0x2f0, 0x5, 0x2, 0x2, 0x80, 0xcfe, 0x3, 0x3e9, 0x8, 0x9, 0x3, 0x2, 0x4, 0xffffff7f, 0x9, 0x400, 0x2, 0x3, 0x4, 0x6, 0x10000, 0x7ff, 0xfff, 0x4, 0x0, 0x1, 0xfffffffd, 0x0, 0x400, 0x0, 0x8, 0xc, 0xb, 0x9, 0x5, 0x1, 0x401, 0x7ff, 0x2, 0x3c000000, 0x3, 0xfffffff9, 0x40000000, 0x72b, 0x7, 0x3, 0x9, 0xd, 0x2, 0x22d, 0x3, 0x82b0, 0x6, 0x80000001, 0x5, 0xdaa, 0x7fffffff, 0x2b, 0x86, 0x6, 0x6, 0x0, 0x10, 0x1, 0x6, 0xead, 0x1, 0xd, 0x1, 0x0, 0x2, 0x2, 0x8, 0x0, 0x2b7d57e0, 0x1, 0x81, 0x1, 0x8, 0x1, 0x9, 0x0, 0x7f, 0x6, 0xffffffff, 0x66c, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x1, 0x7, 0xe, 0x6, 0x9, 0x8, 0xfffffff5, 0x6, 0x3, 0x6, 0x6, 0xb62b9a, 0x5, 0x9, 0x4, 0xa010, 0x3, 0xa15a, 0x68c2, 0x7, 0xe, 0x6, 0x9, 0x200, 0x9, 0x3, 0x18131cf1, 0x8, 0x4, 0x7, 0x8, 0x6, 0x800, 0x2, 0x7, 0x7, 0x5, 0x7fff, 0x7f, 0x2, 0xffe, 0x5, 0x2, 0xab66, 0x2, 0x9, 0x7, 0x1, 0xca, 0x2, 0x2, 0x47, 0x8, 0x38, 0x8, 0x9, 0x9, 0x9, 0xe, 0x7, 0x4, 0x2, 0x3, 0x6, 0x0, 0x3641, 0xff, 0x5, 0x5, 0x4, 0x94f9, 0xa, 0x9, 0x259b, 0x9, 0x2, 0x4, 0xf, 0x10000, 0x1, 0x6, 0x0, 0x3, 0x0, 0x3, 0x94ae, 0xfffffdcd, 0x3, 0x4, 0x8, 0x81, 0x3, 0xfffffffb, 0x652, 0x8, 0x4, 0x8, 0x5, 0x5, 0x6, 0x2, 0x9, 0x9, 0x3, 0x8, 0x7, 0x800, 0x1, 0x4, 0xda0, 0x7, 0x0, 0x7fffffff, 0xe, 0x8, 0x3, 0xffffffff, 0x800, 0x3, 0x8, 0x6, 0x1, 0x4, 0x5, 0xfffffffa, 0x5, 0x7fff, 0x4, 0x80000001, 0x6, 0x0, 0x1, 0x8000, 0x10000, 0xfff, 0x6, 0xfffffffe, 0x3, 0x7, 0x1, 0x7, 0x80, 0x1ff, 0x6, 0x7, 0x5, 0x7fffffff, 0x2, 0x9, 0xea, 0x6b6a, 0x8001, 0xcdbc, 0x5, 0x9e, 0x7fffffff, 0x3a, 0x5, 0xe8, 0x15000000, 0x9, 0x40000001, 0x7fffffff, 0x0, 0x1, 0x2, 0x9, 0x1fc00, 0x3, 0x5, 0x6, 0xaf5, 0x5, 0x100, 0x101, 0x1978, 0x36, 0x1, 0x1000, 0x7fff, 0xfffffff9, 0x81000, 0x49b, 0x7fff, 0x2, 0x4, 0x200000, 0x1, 0x8, 0x4, 0x3, 0x1, 0x8000, 0x4, 0x2, 0x7, 0x101, 0x7, 0x7ff, 0x5, 0x4, 0x8, 0x4e6, 0x5, 0xfffff55a, 0x10000, 0x9, 0x4, 0xc332, 0x8, 0x45, 0xda11, 0x0, 0x7, 0x7, 0x5, 0xfaef, 0xfffff72d, 0x125b, 0x3, 0x8, 0x400, 0x1, 0xc6, 0x6236ec60, 0x10000, 0x9, 0x5, 0x80000000, 0x200, 0x6, 0x20, 0x8, 0x7fffffff, 0x8, 0x401, 0xffff, 0x1, 0x8, 0x911, 0x2, 0x1000, 0x4, 0xffff, 0x200, 0x1ff, 0x5, 0x9, 0x81, 0x2f6b, 0x564, 0x8, 0x9, 0x2, 0x3, 0x7, 0x7f, 0x1, 0x400, 0x7, 0x0, 0xbe, 0xb, 0x4, 0xc0, 0x8, 0x7, 0x4884, 0x1, 0xfffffffb, 0xdd5, 0xbb5, 0x3, 0x7ff, 0x0, 0x6, 0x6, 0xfffffff9, 0xff, 0x9, 0xffffffff, 0xa3e, 0xe, 0x93000000, 0x36, 0xe4e, 0x80000000, 0x4, 0x0, 0xd760, 0x3ff, 0x8001, 0xe, 0xd77, 0x7, 0x1, 0x81, 0x4, 0x7, 0x0, 0x6, 0x9, 0x7, 0x3, 0xfffffffa, 0x8, 0x5, 0x872, 0x5, 0x6, 0x4, 0x1, 0x8, 0x8, 0x9ce, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4, 0x7f, 0x9, 0x1d, 0x9, 0x4, 0xffffffff, 0x80000000, 0x4, 0x2, 0xb, 0x101, 0xd3, 0x7, 0x2, 0xfffffff2, 0xc, 0xd, 0xab, 0x7fff, 0x40, 0x4d, 0x5, 0x6, 0x5a1, 0x1, 0x8, 0x7fff, 0x3, 0x7, 0x100, 0x4, 0x101, 0xba, 0xfffffff7, 0x1ff, 0x0, 0x1c0, 0xa, 0x2, 0x7f, 0x6849c78a, 0x1, 0x0, 0x101, 0x8, 0xffffffff, 0x8, 0x8, 0x0, 0x7, 0x5, 0x10001, 0x3, 0x3bbe, 0x0, 0x40, 0x7, 0x1, 0xe, 0x6, 0x8, 0x6106, 0x5, 0x5, 0x2, 0x10000, 0x900, 0xfffffffe, 0x2, 0x3, 0x4, 0x5, 0x4, 0xc, 0x7, 0x9783, 0xbb71, 0x627, 0x0, 0xfffffff7, 0x6, 0x0, 0x3, 0x6, 0x92, 0x89, 0xfffffff0, 0x4c2e, 0x4, 0x8, 0x4, 0xe4ba, 0x7, 0x4, 0x7, 0x5, 0x800, 0x1ff, 0x7, 0xfffffffc, 0x7, 0x40, 0x6, 0xffff0000, 0x3, 0xe25a, 0x4, 0x9, 0x3, 0xdb3, 0x2, 0x9, 0xfffffffc, 0xc, 0x5, 0xff, 0x3, 0x0, 0x1, 0x3, 0xffffffff, 0x328e, 0x81, 0x6, 0x5dd, 0xfffffff7, 0x2, 0x6, 0x4, 0x40, 0x4, 0x8, 0xfe9b, 0xffff, 0x3, 0x7684, 0x67300000, 0x7, 0x9, 0xffffff1e, 0x48d, 0xda21, 0x2, 0x4, 0x5, 0x9, 0x2, 0xf329, 0x4, 0xbf66, 0xe, 0x64da, 0x0, 0x1, 0x3, 0xe, 0x7, 0x9, 0x2, 0x0, 0x80000000, 0x8, 0x5, 0xf, 0x1, 0x7f, 0x158f, 0x1762, 0x9, 0x4, 0x76, 0x6, 0x2, 0xfff, 0x8, 0x2000000, 0x521, 0x0, 0x7, 0x5, 0x0, 0x4271, 0x4, 0x8, 0x4, 0x1, 0x0, 0x6, 0x0, 0x2, 0x7f, 0x0, 0x8, 0x3af, 0x7ff, 0x3, 0x7fff, 0xffffff8e, 0xeb3, 0x8, 0x7ff, 0x7, 0x1, 0xe81, 0xbb7, 0x8001, 0x0, 0x7, 0x9, 0xfff, 0xee7, 0x1, 0x81, 0x2, 0x5, 0x92b2, 0x8, 0x3, 0x8, 0x10001, 0x3ff, 0x9, 0x3, 0x3ff, 0x1, 0x7, 0x100, 0x8f9, 0x3, 0x71, 0x7ff, 0x7f, 0x7, 0x5, 0x8, 0xf, 0x4, 0x500, 0x5, 0x4, 0x81, 0xb3, 0xc, 0x3, 0x10000, 0x4800, 0xa, 0x1, 0xfffff8e3, 0x5, 0x3, 0x8, 0x16e08d2f, 0x81, 0x80, 0x6, 0x8cd, 0x6, 0xfffffffa, 0x620, 0x3, 0x4, 0x33, 0x4, 0x2, 0x6, 0x0, 0x9cb, 0x81, 0xfffff9ae, 0x96, 0x81, 0x1, 0x4, 0xf19c, 0x2, 0x8001, 0x4, 0x1000, 0x6, 0x3, 0x81, 0x8, 0x7, 0x9, 0x6, 0x401, 0xc0b4, 0x3, 0x0, 0x39, 0x8, 0x3e, 0x0, 0x193a, 0xbd32, 0x0, 0x4, 0x5, 0x2, 0x3, 0x7, 0x9, 0x1, 0x8, 0x6, 0x6, 0x2, 0x2, 0x2, 0x6, 0x7f, 0x6, 0x7, 0xe, 0x9, 0xe295, 0xb, 0x200, 0xeb39, 0x0, 0x4, 0x3, 0x0, 0x3, 0x81, 0x7fff, 0x7, 0x9, 0x4, 0x800, 0x2, 0x3, 0x40, 0x100, 0x1, 0x80000000, 0x2, 0x5, 0x9b, 0xfffffff7, 0x80000000, 0x8001, 0x8, 0xa606d5e, 0x81, 0x100, 0x2, 0x0, 0x8, 0x9, 0x8001, 0x0, 0x80, 0x7, 0x0, 0x6, 0xa, 0x3, 0x200, 0x4, 0x3, 0x7, 0x7f, 0x101, 0x2, 0x10001, 0x119, 0x10001, 0x1, 0x7e950f25, 0x101, 0x1a8d258d, 0xffffffc0, 0x7, 0x6, 0x9, 0x807, 0x3ff, 0x3, 0x8, 0x401, 0x0, 0x8, 0xffffffff, 0x8, 0x45, 0x2, 0x9, 0x8, 0x3, 0x100, 0x0, 0x0, 0x1, 0x93b, 0x8, 0xd4, 0x6, 0xffffffff, 0x4b83, 0x8, 0x7, 0x8, 0x6, 0x7, 0x7fff, 0x389000, 0x62f, 0x6, 0x5, 0xcff, 0x3, 0x4, 0x2, 0x4, 0x6c3, 0x2, 0x937d15, 0x8, 0x7fff, 0x7, 0x84, 0x4, 0xc0000, 0x5, 0xf, 0xff, 0x2, 0x6, 0xfff, 0xacf, 0x2, 0x10, 0x0, 0xfffffff9, 0x9, 0x7, 0x8000000, 0x0, 0x1, 0xa4d9, 0x2, 0x2, 0x25644324, 0xfff, 0x0, 0x2, 0x2, 0xf1, 0x5, 0x311, 0x2, 0x8001, 0x81, 0x5, 0x5, 0x7f, 0x7fff, 0x1, 0x5, 0xc9a, 0x8, 0x8, 0x5, 0x7, 0x5, 0x9, 0x5, 0x9, 0x7, 0xd2, 0xffff, 0xffffffff, 0x8, 0x564, 0x1, 0x9, 0x130, 0x3, 0xba, 0x1, 0x7, 0x5, 0x8000, 0xc, 0x2, 0x4, 0x2, 0x6, 0x2, 0x1, 0x1000, 0x81, 0x3, 0x6, 0x15, 0x5, 0x81, 0x6, 0xc0000000, 0x16610114, 0x9fe6, 0x10000, 0xffff, 0x5, 0x81, 0x1, 0x6, 0xfffffff8, 0x9, 0xc, 0x8], 0x0, 0x4}) 2.60931501s ago: executing program 9 (id=4480): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x6, @mcast1, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0xf304, 0x4, 0x1, 0x383}) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10001, 0x18000) r8 = socket$alg(0x26, 0x5, 0x0) accept$alg(r8, 0x0, 0x0) r9 = dup3(r6, r7, 0x0) ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f0000000180)) close_range(r5, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) r11 = socket$kcm(0x10, 0x2, 0x4) pselect6(0x40, &(0x7f0000000100)={0x576a, 0x31c4, 0x3, 0x5, 0x0, 0x6, 0x100, 0x2}, &(0x7f0000000200)={0x6447ff68, 0x2, 0x9, 0x0, 0x30, 0x2, 0x3, 0x2}, &(0x7f0000000240)={0x800, 0x8, 0x7, 0xe, 0x4, 0xffffffffffffffe2, 0x10001, 0x1}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x6]}, 0x8}) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 2.555784591s ago: executing program 0 (id=4481): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) bind$ax25(r0, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000500)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf, "3f2c1c46bf3ea6"}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="410f8e16a60596de4a20a9e707bc78b68ab420a02335d80d1233e04f8ee77f8e692cc4de48ca7dc6f9a51d8336aedbe0076333f2dd2cefd46fa45e2070d414d6f01473ad52ced0a7f2a6a7a204562d7c12d83fad4996eeabd02b42035d143a360cfbf0dc2e461e38ddd5c8bdde35b036cc85899356cf1dc3393495096e64eaf64e30c35643b8c783942cce699df09312e5cce7607a984a8fae277e2dbf6a19aca9d877af055d970f9ffe1a50278cf393bceddd68d3b049", 0xb7}, {&(0x7f0000000140)="1d1fd2a823a8601ab4b96143253c128787c671ac644fdb2b850537f25a863b", 0x1f}, {&(0x7f0000000180)="ae5916214d4db60afbac8c31595c44", 0xf}, {&(0x7f0000000240)="23669ee607f2ddbf82598a1d05e645806f5b93a0362949a057f0f7514d680b86f5b4b6ace0031b4cf37e6055f7c1873a5f1b9e53728d1c9e3353b2f145e8354bcb8b92adcff3f72f592dea3727c4c341f2e1596da093b38b895e1456e7676edf43b5dd6d2f016215019879aa3f435f7cc29ed322912a847cbce739614181e7bfa27cb5164cb9c012f3f64ee6a2bb4d8428c127b43d00c621f380261f4d328121fac3de1521703795a150ebef9f3a173446c7d5924aa1a1de7e508ac3683dd2187c768bab044d16e25dd99b10d2e0e40d31800a59ea415cdf36f581b8fe24ebd867746b47ca2ce0db", 0xe8}], 0x5) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001500)={0x0, 0x0, "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", "9dc822c3a4e3a5b3043e5b2d371c0de89c5066fab3bd0c9497e1827fc2985e2af9ee85244f4990801a369bfd8fa41bdafae5449ac4c8379e7f7ffff25843b4ed5693969ea505eeddfb47e06f366ba976c299e41fd66d76607c709fa8b1c636cd664bcbeb19586042663d6b58fcb61dc89d01ad5b5f6d6d0d7f46e412b85449093ba47c4910846e315414b5773a5fa6ba4fa9657d0edb9c0ff31c094910a258982b5c807531354dd07b83913b322dd8649ecc60443e663c333823538db0aa3af7069cedc01ed1c3b8ea763afc7eddb9f78384f672678563e7b5720b7dc3ce4a5c329a9abe767bfea818ad3c65bb3e61f0020d40170deefb4600318ab96254d7c816d622592f333d02c00b976fc63d1afa0dbb8a5151fbc60602969136c23794952bc719693804aa48769056907c0cd54538d447af57e09e00b048ae42febe309e5ca32571b70b88764465d7ce8064ddded75df5cb03785a7cbd2edbd22d69b34d98f5eaa5966a3a63fe45d01b8e378209f40caaddcacf2cc27041302776c1d6b45b1abd32a27235ba758f13456936cd3ecaf17f52b5c73ed3408382f263fcba56481253afb8c9995491bedee0c7faab52a4f9eabfe99a58d69c298b91abaabb8ab1666cfece0ddadff42ab5336aa13602c575c73113d69295d34c5e79ccbe7cc8ba3b5309ada59815e2b9a7ae1ecfcd6ba8fe240a5670e7b010f6e634ee57b468c2cff4b59e6c3137c7fb18d6c132cb79e71046279de2b9b98814f052343672c0281041554ff619ec227d8747384a3cce7ba66653da103665e9f16df1be38fc24568a7d82a708a06b61e0ba07d6a13c4ed1e726a9af13ea81aa863942e6594b7ba6fa2199aea82c5fbb195c12ef3a52509efef09d62a2ffd24481c493b3ed617cf87931f9265b4f46f80b3fbfcb919cd09aa0b581fbda11b53975816c881e2323d2608f2457a4a5391a21f2b85e0c727def2c32291d2e2a15c530668fa7fec7129e70e403184addbf1407828747c872598c5fc2cc6b3b1b5a25d83d6d88b3ab72a742bfd8b68108e6a988c398d97378cb7120b861e549b48c31eb03b8517767f9c729735540a4406334a1321962c6bc52352214321cdba06a5b1a89c981fc2ad116d5d064f8609aa42fc3106e2fee2ef6441e82a8dbb3ddcf5f2dfb4b1683a66f681564dcced8b84e122557292f1f28ff3197a18a71a24fa09ceb9a1d5bae695225f44156ddec15aa8c42f6ff8000545936314b739574ae2ef64d4f1f4a83d07e18b86828a20dea75629a11409f89329a50402988dac55b008fa74d3d7efc30f974c0116c8c8350551b114401d166fcfb81c72c929cb2216368f5f41f22125a0b72dad2c8935892295b964bf4c72a08bb1f484dafd2440c4d01442ff8491d7dce744991643fa1f691e9391da7a455f17563269475a0f55449692c7b279593cac0dec4d0702b7f9e454a10cccbb2fdca0cf3b1e95df0997bdd8cbf32ddc31d506eb9a220e23ff6ba9494104ef36ab7fef047de07e33b8bf66ef08e3ddd2dacb6e9319828304e74c8bf8907dc191ae4ee4e6d8d20bb4db689c844f95a4581e388ebcf254d40f7a3da169cb5c25b4f272751636b1bde3897a59ebf7c952a36f3c17c6a77879b69ae61d0ab7e95886986514b247e0b4338d872d467d08bcf789cad8824cec3d0917a30bde149af24dfba4a02e09a69c0807704fbdc54542a5b1ce1a3f5a361da3ac811dd7cc507e35a7462f80a6377346a932ad6aa2029ffe128a600355042730a228b05594004fb8ae5ee186f29ca8c3f50572f066ba5a6c5c778c3d6f24aec1a452e6f6a5ce4da340710baed10eeee9f55956376b09f73c97910687cd8b501a7ce588fe50e4779a53677dccd7b6f8c1d5a50e06dd27ed6a71629a53207b6be654372a0f6b4271651a577270aeafa0e790200faaa8cbf2e9182ddb578e1e260608d19bd6a7712bc0b3d36be0de3586a1b970d3531267e43577af83d2634d0143fd33bd562d0ebc51965e9059bed20624f477ec0fea6c9ab0b10f5ba60895ada1bf02785fabef9bbefa19bdf20c5593472e01bcca87b660ad2490d6ff622f147ad9522913dd254d42bb07617d44016f64ee9f7082acce451662af37ab0728b1a4255088c71bb60c88814c3f7405ed91c3866231aada77e82f7bbde62d8809557108fa673414a6d760cc2c3f98b0285e79e3ba897645e7b06ec8e138394bfd88246327ef0f9c1a5669dd2352fb1c9878746b41c59d4140791972305eb265fe0ae2e13eb3a198a79222b998b8dccc77c57b3ba8cdccc72dbbcaa1b6655ecda5b258e18484a0b7658712b5b8ed067613ed3fadb6ba67d9c54d5da5cabf0602ec59760d62ca2457f1ae9fa566a3f1b2e180b9f35412c639fae1871cf4e1b9ec41d6ed6180607c7dbc0e38ff95f63478045a791a4b96c7e54037a9f788c6a046e0550d84df7b8816bd7b532fa9a71da12002ade5334e20dd2fc8bc7ec2ce08f5bdc80a5afb9a286bf544ed8b87517f9bcb5c3f3b42a705dfd8bd965369de7c5032f6b97682304635ccb5d3d41bdbffd424016ce158a82c79575c993ed65b89deddcc0b0b018245c6c41d67b4f871de60cf443157108281023c1878f44d26b80f43d92aad1ba7599d80f9276863b7414f0ec1fff8543f2a6bf303ee9a45d618016b4969ce129f638b04c0fc4bad55466dbc8fb7b237cbefbaaea21eb3cc40aa81d63e6a1526b50b5c516f90c5139796bcfbae3f2b1b79974c456c2ff24fc9d46d2ec7d4f11d638e08ab6ffbee9f7580598d29771d612b194870a52666cafd7442ae1a635ab6223e390110fb8d5369a4d5cd821e8e58228dfffae2e302a38c1a5ab273ffd1a2897b2f99715f0b1f2c8ceb0be2bc72370b8494f6a605ece73d6a15497d1b41a39242e56b87a7b0015bdad1e38a14bb335cc80c9679ea64ab1b4e1ee89edacf0a6c7541c6aa1790a053af9b3e32ba9a7b843f141bda8006eca3890722636991efd7ae471eb4a9b533b13c9591175f9cdec671c175b074d55e813f4aa48fcafa6f9843c13363d01ad9ee86305fe52d245798d55b3b7399ed73e6a133f5e0f2dfa147580a11188f3216b76d430a4a99bbdab4064bd56ae1c123c5fd84c7ee9f7deecd124ede6825b8ab2c865c32a9f37dbeda2aabc46601b253fe33361be60afb9211d28ecf935aef43d173983fddb81a151e0c03766eb6c64c696c813f438f71588c8a8fae8a9859a6a54f0bdb6c6753f468c36611109e53ecc908ceb1f9543ce2b38940a33fa59bd31bb56e6fc28766d87b87832d158f2076a1a2bb26f11ee436cb637577f999841bb8cc6e2186840e0d2b39a51a8318da6eb9496d53389db634a3f02459096617686c3f4463519eac38e5b776f4b5181383a0017f8c4a8de1dd150c4e77598480b15e65535c016113928c11ab1dcca2a66653bd640c5ae03eb6ad6f99689338825f4257607827380362324984128a1ccc68ceb6a11c34f7b553245197450cd3458865150c46c7d6f3ad09290552cd026b9ec32de195ac78160d22553f7cc0a1bf179a5bffb5c39842b771dc8120ee57272fee6349c6a9f2dedf107a6d631733da5dd326583f6e7eaafaffc8cfebce8cd8138b126dc3b06d84b782616ed61d0f2dc97d2295f83906c567fbfbf9e5d9967099576e5388c31d3d9916a4989418a2d29a1b87703d458f7716b4bb6e686b0c4d0026137ed221682697785ad326798e3806eb9455400fbad4b1b948e6da5ee64d44c27178c17ea3424e7bdb130eac65196f6e81f509a105c13ea511a2b861be3f9bff7d4df226c07b7017ddd845255d430a15feeb96c6e55bb2e5b18b73f8aa1525e84979c3d1b927eb00796848cc4f407d956457b86bd1c68bd4f5d747b9e231d6b7bfc98c11b2368bf0ca6c7922d7dc4a25037dd6c2c0cfbee27d90a306ae25a5b8ce41d0b893498a1f7beda9a0106dde8d216d945055cd92d56c4fc854e857a05b57ee36cedc5d780d3e97280177280499d74507b73e1c6ee22e35d4d7cf531c0ca33e7c033498d74a8abb9d40b8ea420cef9e3130ed225b951a2af75adeef3bf69cb6c3ccc6d7f3a13459f8f0b4b2e24f31eeeb49755c8f5aee6be3b4dd7b011faa564ea44c9d884b09ec267ffac958fa30e13b48e58bbdd60ef8388dccdbcb1229b8e618953c8ca22a899c51e5c9f8686d9ed47634dda6b9ccf85b6e0fcbfc43735224347d1a0fb30a1a84ea001281652cacdb628df20d92877e1d50dfd2f07f04f0a2464daedb88237d20dc4a93803c1b0bcafd2544c29dabe8291bd93e3007890fd8b6f1777d1e8be633eb990d67fd19467918bbf57bd3a39e77b67c893c953e3da28c15b8f1f47ca14cab9a60bcc557aea61db28966911291542a7d05eb228b7cf17fdd4b4ec411aaf68696e6ed780c68f21445fc1ab3cbab99e467d8d8a546a638241fcc42c5f28d322b353cb2625ecc153277b1c7bc61202875d8c83df4bcf59f48de3cdef0c9b478f2e296e823b5929f5569a4898444efc5ccf09420b75db9b458867e92626ea310db6056f7428266fe658fbbf1480082e4989ef5f00bd73fc03c9cdc55f18ce371e99616a780a8c361df093ed34899e4796b2754d4f2ddee2b7ea4dc7dd8b5961a727a4f3172641ea1a8078c53fd2adbdeef0be682fd7a1d329b68a56ca065e10d865ed3542ee32fc6ce12b45d3e9a0fdeedf0bee5b166ed283230a705f54bfc5ab706ea1e90fce6a97442919de7cbb46b2eed61286c8ee3b068543e7a20fd8bb43c06b72afea0523fb24f8c2dbc54c4a1a4ac3cafbbb9dd11955dd00b9691755bba524665fa12eb069df1a2a1af05cad22a82d5880a40959af19fefbf065399319faddd621549c4bccd653d1f0d26ae9c48460ea38b5221a5c3fe40ef044fd2307ea7329100558eeaa18ad203bc8d55fdffbaac5d94095633b54d835d35a1f983a94b814521eab28945992c27346d70a84f54972651e6f767ae7c9179dd34c0647434804f15e4193700fa62a27cd0ee13e75e35516b2b5a2736e4942e7e76c73dc4b8f44ef09c5e8377690f5f2998c14f0d524b26c771175443d8126767492ee9def07214126e424fa6244e498d73595d2a99f76923919f2cf7132e19b154fc90a5c26d9d437859e0e5bd26cc160926979d6a36beb3fe79192139bc9aa99298a03ab21439b8f232e5dd9ad9a3bf25092bd8438edb9437b5672c56e3a71e5052767c9b3faaefa8f6b34d7af680c197b7c3aea588fffd823b448a18a3f130b82d25333f3376afe45445ebb008f4babfe9b698577fe7e7b69db2fa6dcd980639cf81332c6d0ebc602e88ab67054fce55ca7f5c61898602278a0b5772781ce0f8e6638ae63ccaebe4764cd1430615beccfa8d55085547accf9861bd7f9cc5011fe1c9844e4587e3c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002500)={r2, r3, "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", "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"}) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @bcast]}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 2.473048651s ago: executing program 0 (id=4482): socket$nl_netfilter(0x10, 0x3, 0xc) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000400)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0x80184132, &(0x7f0000000340)={0x0, [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], [0x3, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffffffc}, {}, {0x0, 0xffffffff}]}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x80000001, 0x3a, '\xbb\xbb\xbb\xbb\xbb\xbb', 0x3a, '/dev/kvm\x00', 0x3a, './cgroup.cpu/cpuset.cpus'}, 0x47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140020004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000b00)={'pcl711\x00', [0x4f2f, 0x7fffff, 0xffff, 0x4, 0x7, 0x1, 0x1, 0x7, 0x54c6cff3, 0x30d, 0x2, 0x1, 0x1, 0xffffffff, 0x10, 0x5, 0x20000000, 0x7c, 0x3, 0x4, 0x89, 0x3, 0x0, 0x20001e58, 0x3, 0xe66, 0x3, 0x9, 0x200, 0x0, 0xfffffff8]}) 1.776682081s ago: executing program 0 (id=4483): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000001280)=@ethtool_gfeatures}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)={0x2, "dc71"}, 0x3) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000500)={{&(0x7f0000000100)=""/200, 0xc8}, &(0x7f00000004c0), 0x17}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000000c0)='sys_exit\x00', r4}, 0x18) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xd, 0xfffffe0000000001, 0xfa15, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000640)=r5, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000000), 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000240)={{'\x00', 0x3}, {0x5}, 0x9, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)="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", 0x200, 0x0, &(0x7f00000012c0)={0x2, 0x10d9, {0x0, 0xc, 0xcc, "a57c9d6467494560f1d69d4b06884eed9ea55b53222e1d09e374d70f8f1dbffc85637ea0776273e386216fb05c2c5e60b9d42b6c9b5b0aa55e2d4fbcff0e0636911395f70faf05dc8f8ea59e7d94a5d075b5cfdf8b379acd4cb2de5d7ab15c40bc2911b4732c366d9d1a278eff9eabdb3257fb12a3943ac9c9f056941ecf7bb182bc392d0a69a734c486cfcdf6126a73f60200000053705fdca9152f7e2a7a0bc745fef32543baaa36632a12af0e50e5c988a3f4249e0ae6deb0be16427380405febdbf5f767eba4a5229982", 0x1000, "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"}, 0x6f, "78d62a4bd8ac8f65b01ee90987653adc826016ee61b5c963893d4b83c653354e3ba669e14e42ff9e3d1b71a8d9731b4d9be34a5e2c38f869efc293db420c5fb2d1af9504fcad32ca2bfd21c66ac196e79ea502e34260706ae81c15fe6347dff90c221622bd375f7ddb1f6c95117d1b"}, 0x1154}) 1.575311115s ago: executing program 9 (id=4484): syz_pidfd_open(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x818}, 0x20000804) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCSETS(r2, 0x8926, &(0x7f00000000c0)={0xfdfd, 0x0, 0x0, 0x81, 0x0, "5dee130300"}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000240), 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x7, 0x1}) r3 = socket(0x2, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/210, 0xd2, 0x7) r6 = getpid() mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'local'}}}]}) r7 = getpgrp(r6) ptrace(0x11, r7) 1.444533057s ago: executing program 4 (id=4485): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000540)={'aio_iiro_16\x00', [0x4f27, 0x8000002, 0x1000, 0x10, 0x0, 0x6, 0xd, 0x7, 0x7ffffffc, 0x104, 0x7, 0x3ff, 0xfffffffd, 0x20001, 0x6, 0x101, 0x619d, 0x9e, 0x5, 0x40000003, 0x89, 0xcaa7, 0x0, 0x3, 0x86a, 0xe69, 0x3a, 0x4, 0x10000006, 0x0, 0x2]}) 1.362413733s ago: executing program 4 (id=4486): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptp0(0xffffffffffffff9c, 0x0, 0x222000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e000015000000000000000f000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001820000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 1.361834664s ago: executing program 9 (id=4487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x3, 0x20000000, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) (fail_nth: 10) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x804) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 727.763306ms ago: executing program 9 (id=4488): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) munlock(&(0x7f000043a000/0x4000)=nil, 0x4000) memfd_create(0x0, 0x0) r0 = gettid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x400c815) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x1, 0x32}, 0x18) write$UHID_INPUT(r3, &(0x7f0000000680)={0x8, {"3b7f7e347ca708b88a10fb4e90ea86288ad894f3d4db1eb366d0465591aab61d6bf68366a2280b358e417ee33f6be8540b5748e6aa1b87ee89fc84813a07fe62ad209d00c3b6651287848d60955e0302e6a8e88d22deb5b220158418a7c58aec6d07e6235bef251f7a8efd2e2ef7ea67ff0978de2a200c5364cb2900e58f9f4c030444ad2210c1b57d340487f17368f7cccf2f58b674ab7f7579363d2b2aa8e017aec2b644e97716e632aad03aefc6940b5044564115cb611bdc54846e173fc02929837c57124031b5b070ed1a27880f406032ad5372f11c36223ca83b0a63084a1f9e61eecf80b8011e3645013265cef6030eb1cf15855fc93fc33e0fb158b02a99e5482237ddce85e11e67961ecd3c439356a1cc92be1024ecc1f8390043a0689a87c7fe8dc22347fcde77dae2f555cf12945752533fd8c3bf24deab57f197389a2f9ded16cf3da36f07634304cc29043b79966ab1698fca362dbff7fdbbef657d5adcab6abd9a43714886b466e40d55499f92ce74a0737d8317437514f133a4ae7b8e8c978b0a9f9cedaaa0e7e51e9034f975581a64a4d7585fc9bba661b1da44ceda4c99abc738dee22b4ffd875de8f58f647bce4dc60751a1fad212d942f728f7d4747fc82a8209fc06361713419a6598c6e87385d0cc0ae34698009735ed49720163fc46b9db13b2df2818ec0073e4422e8bb66ed28718bddc463077754d3806e62bd47c5c84ebb87f0df7a4a3132e164cb0045b9dcf9259a777680455dfa2689834ceb708945758222e3cf66cd8cdb31a5d0af7b18df797deb4a1938d91275b7d99c4d3b910e9b02320f660b39252bb7edf43b50b30090002d0aac008a9836ff53d726af4a0c584bda97d2646c8fa712fb8c91e236a8ac6d9306a844f04d8b042badaa92fb4fb6757ae5d68fd8bed9425aa13861406241d28b19f49923f2d34bd2bbd2cec2864b9f428bea84859c2d1f0b8014ccbdcbcf689f1daeaf465ce18ea54a1edc8540580d0f2bd79d84c700721f481d22df6ab09e196d5641745df12bad6a9290305d091d4b900f763041da229750e7cbc321150dd0ad0f803af359a861802cc550532e9f7cb0dc482c6928e47fcf7359739d87027974cb8cdcd96aa6d5ff036114e408074cf007745b61150bb0b25eaed2bd000942c9145408b762fa1e9dec2f8cfc33c981019708a909fd82a931f249df9d427bfd479a78b4c789adeb6bd123aec4e7097219ee6039c00253b88fb838ee062bebebeed1d8ee050c16fbc7bec65204801a1bc26c0536198300396f9b26deed9da12aea0f4a197bb8b813c795029830d87612d7ec94ecdb8c39f6e954df7225624b0f2e4ae0ec5b49f7c5b769b8f3c2443abf0d5e7403e0460e75ff5146b4c6c49f5e4e3f11e86c7ff93b9808b72c9e456aac87bf4f44b3f546bd53b4e005b649a4d7a1ab1d1a8d2f7eec220d6b49a143da0db912ee1f83f9a165466c9d3a6a72dbc0aa450bbabbd6603c7c522b7a135dea63eab8e5333655d93e1e4c1021b318618746735658f2912b3b851dec501ddb028ad1892b825cea4bb5858b14a118d9f83c8878fbec2978603fe0f7ca889b15434b6791cbab963c54ae2115ae2cc46f6e8ff26f4c6a5049859093f0418e53984ecfbb459f55c946a1f7ab32c795db726b5424fb3517abc15c9c769b3c3569efdfa080f5487f353396bc5f28480328410580bed8773d13dae0112d889edbda714cd2e182b760836e35746799a061902fe73157425eb18ef471ac10924c967b3c3f8524de07c0b1beda9a73f949196e70c084a110e332280fc8028022877651559c20b22630a9479c3b0f00eebb371919e2e7ac58593af1129eeb8422e1ed926781f79837c9c2cb2de5b859af21863ab16757ca3c2d4324620333c0ae7c6d2ad053f186bcb3982315287c1350e10d751babaf9a51c41edc054bcbd24adb77cfb856b908c0a555051de82fb34a7b581f9d8eb816f46e95164d0253b1822a8224cbbc6e9776caad7f6c0a37ef32d2fe8e6cdb17e40f5e56c8c3554fd3cacfc3d9a5036cfb3d944f153e6a8e9ec06ac977e5ed273b09aa1008e31ef28d82c71cfa31b32f6f2f12373f67836fd96666a507b66d2bb4ca60cc6c9a59fd233dfba4e1aa4ba9ad6c8868349f2dd13747613a341c6729847ee7738969c2a22f769179f1e483a871360dcece61f6b1676fa4acd89c54ba6b93028be33f61e268c9e28d8b43c8e046206c4980ff889e4ccad7a8a221b5c026aa203642b4698db100cbcfdb955dff070980e1387b1f66f8b0b432b6cfa7f5aca3d730c7a2014a898e9a82514f2964c2887148087d7a92287f8535eaab78f0fe048b612b754a6471dec48eb609f17970fc27a4eaef7b20afc1a3ed9a8652f2d1edcfbd3eaa979f55cb92f0d990e7ac910f81bb310478dacaf87bd89dd1d19be5e719cdb7757e5b865958f5eebb2154b906b5304c5d9130183baf9b8c58c1b59eab997280b50827601ae4ca3d4686187154103a030e91f53feac3d7175d0e60a4d2742439912ba47c737cdb1a03ccf81edcfe2ca7201621ca7789b9cb07654280e8631199be732449f64b7f2e257f463d22f395ea28a3c98c092b82bd6285203294d1eb3e02aba920996142e4e1a6eaae3e7ad1e52d5edd770a2a2a309c29ff1fea4ba8e1008daf897027059842f05a2bdd5d1eccf2a1023934b5b39c3426d5cd1bc3626aa768feb51a5d17ad6c931138c7d7569f112d9403a364ff302d51bbb59e4f5c06fe234bcf2c3edebdfe87d9bf8585f2c25726bae036d9081c7530820e552e6db08cd05b25a6604b80e48aea6c8b3c2eebafa521a601a168837d733849179bcb7d5ea142c232cdc46738b7592c594918de9afce75a43197327085e7a27cfbae8fd584e65cfffaead7c2aba09ae49118952941fba64e73ce4b1072b07f1b8ecf70fc622a3a4918473fb7e26d471932f92891d1e4c8ab09b43359b413400adef60204415d6f777ae1d3cf91c328cbafd067a5bd3d2e091c3956f4c0b3b6995a2044bb7df8e5408842c0ec4449b351da91a1ae7c1e50f3e2d0fa1ed0d6bfd3e69404e2ee509dc1bc2310765247cf629555461f335b5c99cb2ff39633cc9cb590e2a1af89eeea4cf6330949e1c68c5367f77c716551bfc835ee59e65f4348d86b64d94c3a1a0398ac92a4735e9f31a7fad36eb3b1f08caaaec5ae709e588eee7fc67a4360426f06a80676284f6e43460cc86baf87f41046610685aba2b9936ec0687b3763a42b2fd33e3041eb4ff89a97afbed6633196e4bc84c8f4db6afe0c816d90ed0ffa603bddd1b9fe25bd40ea6f9395490f63adf543d00dcbd23c5700b05b05781448e677f7ac899cba3c28820d7e26eb24945b1cb4ec56a3b69c10500ef26a7a60050465d7ced992c442a0857b2592461e9a9f5edc24f237406c583982f42c89e0c0bdb4aad5b2511234a8ef0c45368f1f8611307ae7fa38c855701c80493570d9c664f3aefa7e0d04ddaf8463ae34769d605e8def993dcbe9d2c4300ef608844b5de9c1388e7289ec01011daa5733035d5dae4ff3e556e7e1ba71eddd217de5429d41327b289c77a1b1e40c64e8b78c1ca07ca6569c084c430ac8273ccc374ee344e6d4334de56e293eb1ecceed8deea211a898bf5406844a0b354a8173b78cdc168bfde8749211a38133b2cf6f278a3f295a7b5266099032a94fbaa72768805e3b87d9d18a4499406501ec913e44b5478aed180e2a1d0f835db823309d54abd2819356078cae02445080a268a41cac760653783423de4c42435d2f55ec21f57059e4b8a61bdcd5a488858a33ab86fe6ea96bc769de2e6765533e86e50f4a78ec8efe8c114db68cfcf12120ede8eff3ae08cf812c04ee3ec1bb770aa4a76ab26e83a1e6cfaf8581149c239fc1afa484a29c50cb9233ad425facd5e7b1af3a2254fb1e6a72035ca82eb01c07422440b1409f360d626fbecf433e6775ee0598407b07ec72d960e5ea12cf5d301fb83d9c9fa20c1cc28d3444b171171c50a739c708a6aa542b64c864247bb3301eef26697d68c039c296e531693270b27849b287ccaf300382c98f58ff75f05b8312d6f0746f82e9df5736e752d4d3c2550d76a85a73b9c1563f6c085e7cf850d2ef73b7dc696550dacf818a6c425d010ff8912ca6d742304aee210309832ecdc3ea3631581e4e2789b3e7af12fc8836e639249a4754206274f27be9a38dd54c040cfb6f0d48abb27868f16c280c412f1357634ff8b36da64f0697b3816241f23037ed884c0de17d0bc2e7c6ed6cd6a693ed3885446051fba04484c076089be12de83f5aa8652b99516d3c24fe9fcd9d5178941a78a492e407e07dc3adf3c2ca23237b35a1da94dc0c172ccfbcd7006b26273d89fa886445ab34172146b38fc27484ab9724b7f59d3a814ba91e966991519cd56906bf9a3c615e0e87e24e3ed49a2fd6cf284855879f8a15d262c79d2c27bb61b9355b43b637c5c65f2504c0a2afe2fc18b9020c78165dc4b61494c779c48a7b4fce68664ec56de0240b9ff42c713683d05601539497537e53ad583dd5f42c6a946ddff720b2cd4d281413e91a752bee6c24346d2f8d9101fe465cb105e958b7cdf0a09fb23f276a35bda8afa9d32f03d9554b2ca2c92e52daf7df9196df512c5ee230c68799e7988b4e73f709521aeca72eaf28badaceace913b58f80f177602ce9a6f13de608f938161fbfba86406b43224725bfe9f61f3e7e24fd67728ed5eab942c0648b9298406be077c11bcbacdf264b54f678597777cd1b9a4171afa6ff92432168a1962a7a593b9eacb5914e15093dccfdab202e52c54ac32cd9327051d715bb2fe7857428a2c0f7bce56557005c427805446b0978d13d211049e8aa04bf635737dddec2e932c7c4e569ebf3f9b88ea129e4aa9e4a567b516d7623be4f7f8604d55e26ac7ec99db3c1e8cb1ddf03efc9d778e8b4a0fce8d53e28ebd348dfdef5c46ffa9a607b3ead83f45d10943656f17a82c0b1d7781baabea2645caab1987c7690eb325c5d25ac55811583857c30574f3b8196aa87d7aade4276b433fc4f129cac55b74f77e902938cece66d7594596aa5d7752245574fd212e98f63f690ee75c580a9a0a0bf172d9f5f1621f79bc0cc27735986ad41870baf5450f0407747f43bfd1aee7f68fdc729b0094e65bddd73d6debb281927d8ef244aacc6b99b22d4dd28e3db458815e7505568112c6bf1c846135431ffa22c1de422ef5289c087243a5b8d502b60ff9595f480cfbbb50191b92887e07f9c5916813e54fab853cb0387f23181989450ec9c4cf3e698d50ea36073f90e4566cadb7c4985523b47a6009c3e47daa4bd8a842124048d4aeb570b2133b0aff442b7710e70addefc9da4b6e762e4bd776d471bf52635b2ab042c14ca0f3edfb49bfba181ecaaf0657350091d89a9abbe71f11f0930e3d967697fa02ead54feac28eeebec44b9d70e14479892100d32cbf401220216c3e4af2232b8a3185aa07f3255f67fcbbdf851be235ab3c0fea7f9a54bd9259bfb7fa0683121c3e7e72ea30ee9ee3f89ddf2f557fac37bd017d147d9e15e2f8f8dce0edf5b0bcafc66610042f08775253f2153ecd07d5ade54bf12766447e89002159edeb7007db1d25a6cc6a170453bf41213dd1ea328e3a3e11c1d480ea8cf535e3784507624b645f7cb5bc1291e0c9ecafb5404f528d59c9bcf3c23af40d44ae194b34cea6ca6b61917c5cdd36dcb29c3f1a22334eae31ce377b928215c0269656d9ec6896186ac3a39c9dabd3fb3", 0x1000}}, 0x1006) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) read$ptp(r4, 0x0, 0x0) fstat(r4, &(0x7f00000002c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ac0e0b8a32be8fe91c368e60693800000000d6e5394b00", "e7198360", "f7a5c1777af05eaa"}, 0x38) write$binfmt_elf64(r5, 0x0, 0x78) 727.375376ms ago: executing program 6 (id=4489): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') (async) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x2, 0x4}) (async) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket(0x2a, 0x2, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, r6}, 0x10) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0xa, 0x85, 0x24, 0x8, 0x856, 0xbc02, 0x7dcf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x5, 0x90, 0x1, [{{0x9, 0x4, 0x24, 0x3, 0x0, 0xef, 0x79, 0xfd, 0x6}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 400.215879ms ago: executing program 9 (id=4490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x5431, &(0x7f0000000300)={0x0, 0xf93d, 0x1000, 0x1, 0x251}, &(0x7f0000000180), &(0x7f0000000380)) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[r2, 0xffffffffffffffff, r0, r0, r0, r0, r0], 0x7) symlink(0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4089, 0xff9}, {&(0x7f00000006c0)=""/57, 0x39}], 0x2}, 0x1}, {{0x0, 0x0, 0x0}, 0x18eccf73}], 0x2, 0x102, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r7, 0x101, 0x1, &(0x7f0000000000), &(0x7f0000000580)=0x4) keyctl$read(0x2, r6, 0x0, 0x0) 355.409111ms ago: executing program 8 (id=4491): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='cramfs\x00', 0x108000, &(0x7f0000000180)='*+#]\\\x00') syz_usb_control_io(r0, 0x0, 0x0) 305.260419ms ago: executing program 6 (id=4492): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe21, 0x7, @private2={0xfc, 0x2, '\x00', 0x13}, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400006b4b000701feffffff00000000037c00000e0000001c0001801800108014000f0000000000000000000000000000000001aaa58d3015152dcb1ee22d19a3d5223d216773e19905ccec9a171afcffb426121cb7d742"], 0x34}, 0x1, 0x0, 0x0, 0x4040016}, 0xc000) 0s ago: executing program 6 (id=4493): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x3, 0x0, &(0x7f0000001080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000240)={'wlan0\x00'}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000d, 0x11, r0, 0x100000000) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000d, 0x11, r0, 0x100000000) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xa) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xa) kernel console output (not intermixed with test programs): p=0 hugepages_size=1048576kB [ 1306.451562][T21269] lo speed is unknown, defaulting to 1000 [ 1306.500757][T21252] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1306.528316][T21252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1306.563521][T21269] lo speed is unknown, defaulting to 1000 [ 1306.566396][T21252] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1306.639152][T21252] 64656 total pagecache pages [ 1306.644113][T21252] 0 pages in swap cache [ 1306.649609][T21252] Free swap = 124996kB [ 1306.653881][T21252] Total swap = 124996kB [ 1306.658915][T21252] 2097051 pages RAM [ 1306.663030][T21252] 0 pages HighMem/MovableOnly [ 1306.668045][T21252] 429689 pages reserved [ 1306.679054][T21252] 0 pages cma reserved [ 1307.521454][T21281] can: request_module (can-proto-5) failed. [ 1307.550682][T21281] overlayfs: overlapping lowerdir path [ 1308.224692][T21297] bond3: entered allmulticast mode [ 1308.232034][T21297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1308.652377][T21297] bridge0: port 1(bond3) entered blocking state [ 1308.659648][T21297] bridge0: port 1(bond3) entered disabled state [ 1308.667447][T21297] bond3: entered promiscuous mode [ 1308.673002][T21297] bridge0: port 1(bond3) entered blocking state [ 1308.679313][T21297] bridge0: port 1(bond3) entered forwarding state [ 1308.686240][T21299] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1308.698771][T20704] bridge0: port 1(bond3) entered disabled state [ 1308.710245][T21297] tmpfs: Bad value for 'mpol' [ 1309.170841][T21309] fuse: Bad value for 'group_id' [ 1309.184746][T21309] fuse: Bad value for 'group_id' [ 1310.093552][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3869'. [ 1310.104185][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3869'. [ 1310.133189][T21319] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3868'. [ 1310.615705][T21329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.492415][T21346] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3877'. [ 1312.093353][T21355] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.3878'. [ 1312.214530][ T30] audit: type=1400 audit(2000000346.726:1475): avc: denied { getopt } for pid=21354 comm="syz.9.3878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1312.373854][T21363] can: request_module (can-proto-5) failed. [ 1312.476897][T21367] team0: Device ip6gre1 is of different type [ 1312.812484][T13814] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1312.885446][T21364] overlayfs: overlapping lowerdir path [ 1312.986699][T13814] usb 9-1: Using ep0 maxpacket: 32 [ 1312.993230][T13814] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.004585][T13814] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1313.079681][T13814] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1313.125634][T13814] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1313.303473][T13814] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1313.321082][T13814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.346471][T13814] usb 9-1: Product: syz [ 1313.364439][T17608] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1313.380751][T13814] usb 9-1: Manufacturer: syz [ 1313.403023][T13814] usb 9-1: SerialNumber: syz [ 1313.564400][T17608] usb 10-1: Using ep0 maxpacket: 8 [ 1313.579974][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1313.588465][T13814] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input95 [ 1313.590519][T17608] usb 10-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1313.646131][T17608] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.678759][T17608] usb 10-1: Product: syz [ 1313.704540][T17608] usb 10-1: Manufacturer: syz [ 1313.721711][T17608] usb 10-1: SerialNumber: syz [ 1313.947080][T17608] usb 10-1: config 0 descriptor?? [ 1314.328658][T17608] usb 10-1: selecting invalid altsetting 3 [ 1314.390126][T17608] comedi comedi4: could not set alternate setting 3 in high speed [ 1314.428880][T17608] usbdux 10-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1314.450862][T21382] can: request_module (can-proto-5) failed. [ 1314.463770][T13814] imon:send_packet: packet tx failed (-71) [ 1314.484151][T17608] usbdux 10-1:0.0: probe with driver usbdux failed with error -22 [ 1314.494727][T13814] imon 9-1:155.0: panel buttons/knobs setup failed [ 1314.513494][ T30] audit: type=1400 audit(2000000349.046:1476): avc: denied { setopt } for pid=21370 comm="syz.9.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1314.523329][T17608] usb 10-1: USB disconnect, device number 15 [ 1314.555469][T13814] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1314.599752][T13814] (id 0x00) [ 1314.674335][T13814] rc_core: IR keymap rc-imon-pad not found [ 1314.680257][T13814] Registered IR keymap rc-empty [ 1314.692478][T13814] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1314.705284][T13814] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1314.716152][T13814] imon:send_packet: packet tx failed (-71) [ 1314.846079][T21393] bond1: entered allmulticast mode [ 1314.854970][T21393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1314.862600][T21393] bridge0: port 3(bond1) entered blocking state [ 1314.869142][T21393] bridge0: port 3(bond1) entered disabled state [ 1314.878026][T21393] bond1: entered promiscuous mode [ 1314.885247][T13814] imon 9-1:155.0: remote input dev register failed [ 1314.905166][T13814] imon 9-1:155.0: imon_init_intf0: rc device setup failed [ 1314.949333][T21396] gfs2: not a GFS2 filesystem [ 1315.296278][T21393] bridge0: port 3(bond1) entered blocking state [ 1315.302603][T21393] bridge0: port 3(bond1) entered forwarding state [ 1315.343895][ T1332] bridge0: port 3(bond1) entered disabled state [ 1315.344989][T21393] tmpfs: Bad value for 'mpol' [ 1315.358432][T13814] imon 9-1:155.0: unable to initialize intf0, err 0 [ 1315.369570][T13814] imon:imon_probe: failed to initialize context! [ 1315.376188][T13814] imon 9-1:155.0: unable to register, err -19 [ 1315.388778][T13814] usb 9-1: USB disconnect, device number 17 [ 1315.617900][T21402] Bluetooth: MGMT ver 1.23 [ 1316.884886][T21426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.980162][T21426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.134381][ T5896] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1317.254748][ T30] audit: type=1326 audit(2000000351.766:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.8.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e20385d67 code=0x7ffc0000 [ 1317.278411][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.396516][ T30] audit: type=1326 audit(2000000351.766:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.8.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e2032af79 code=0x7ffc0000 [ 1317.501908][T21435] bond1: entered allmulticast mode [ 1317.517307][ T30] audit: type=1326 audit(2000000351.766:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.8.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e20385d67 code=0x7ffc0000 [ 1317.537969][T21437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3900'. [ 1317.540948][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.574256][ T5896] usb 1-1: device not accepting address 127, error -71 [ 1317.586001][ T30] audit: type=1326 audit(2000000351.766:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.8.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e2032af79 code=0x7ffc0000 [ 1317.609500][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.609889][T21435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1317.610574][T21435] bridge0: port 3(bond1) entered blocking state [ 1317.616806][ T30] audit: type=1326 audit(2000000351.766:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.8.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2038eec9 code=0x7ffc0000 [ 1317.616857][ T30] audit: type=1326 audit(2000000351.766:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.8.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2038eec9 code=0x7ffc0000 [ 1317.616897][ T30] audit: type=1326 audit(2000000351.766:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.8.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0e2038eec9 code=0x7ffc0000 [ 1317.616937][ T30] audit: type=1326 audit(2000000351.766:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.8.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2038eec9 code=0x7ffc0000 [ 1317.616973][ T30] audit: type=1326 audit(2000000351.766:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.8.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2038eec9 code=0x7ffc0000 [ 1317.617009][ T30] audit: type=1326 audit(2000000351.766:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.8.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f0e2038eec9 code=0x7ffc0000 [ 1317.645063][T21435] bridge0: port 3(bond1) entered disabled state [ 1317.795814][T21439] tmpfs: Bad value for 'mpol' [ 1317.796677][T21435] bond1: entered promiscuous mode [ 1317.807109][T21435] bridge0: port 3(bond1) entered blocking state [ 1317.813434][T21435] bridge0: port 3(bond1) entered forwarding state [ 1317.833836][T20712] bridge0: port 3(bond1) entered disabled state [ 1317.927669][T21441] can: request_module (can-proto-5) failed. [ 1318.959176][T21452] overlayfs: overlapping lowerdir path [ 1319.008454][T21455] fuse: Bad value for 'fd' [ 1320.270419][T21487] bond4: entered allmulticast mode [ 1320.276011][T21487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1320.283153][T21487] bridge0: port 2(bond4) entered blocking state [ 1320.311414][T21487] bridge0: port 2(bond4) entered disabled state [ 1320.327122][T21487] bond4: entered promiscuous mode [ 1320.335741][T21487] bridge0: port 2(bond4) entered blocking state [ 1320.342115][T21487] bridge0: port 2(bond4) entered forwarding state [ 1320.356162][T10911] bridge0: port 2(bond4) entered disabled state [ 1320.366593][T21487] tmpfs: Bad value for 'mpol' [ 1320.684073][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1320.704277][ T3176] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1320.801456][ T5815] Bluetooth: min 0 < 6 [ 1320.816131][ T10] usb 1-1: device descriptor read/64, error -71 [ 1320.844255][ T3176] usb 10-1: device descriptor read/64, error -71 [ 1321.064344][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1321.084501][ T3176] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1321.203968][ T10] usb 1-1: device descriptor read/64, error -71 [ 1321.234600][ T3176] usb 10-1: device descriptor read/64, error -71 [ 1321.324694][ T10] usb usb1-port1: attempt power cycle [ 1321.798704][ T3176] usb usb10-port1: attempt power cycle [ 1321.798986][ T5896] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1321.974285][ T5896] usb 9-1: Using ep0 maxpacket: 16 [ 1321.985364][ T5896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.996588][ T5896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.007700][ T5896] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1322.016896][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.027021][ T5896] usb 9-1: config 0 descriptor?? [ 1322.143984][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1322.151609][ T3176] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1322.174674][ T3176] usb 10-1: device descriptor read/8, error -71 [ 1322.181069][ T10] usb 1-1: device descriptor read/8, error -71 [ 1322.366288][T21524] fuse: Unknown parameter '0x0000000000000003' [ 1322.435892][ T3176] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1322.438878][ T5896] zydacron 0003:13EC:0006.001D: unknown main item tag 0x0 [ 1322.447826][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1322.451317][ T5896] zydacron 0003:13EC:0006.001D: unknown main item tag 0x0 [ 1322.466733][ T5896] zydacron 0003:13EC:0006.001D: unknown main item tag 0x0 [ 1322.475004][ T5896] zydacron 0003:13EC:0006.001D: unknown main item tag 0x0 [ 1322.482924][ T5896] zydacron 0003:13EC:0006.001D: unknown main item tag 0x0 [ 1322.507310][ T3176] usb 10-1: device descriptor read/8, error -71 [ 1322.537581][ T10] usb 1-1: device descriptor read/8, error -71 [ 1322.539815][ T5896] zydacron 0003:13EC:0006.001D: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.8-1/input0 [ 1322.691126][ T3176] usb usb10-port1: unable to enumerate USB device [ 1322.694363][ T5896] usb 9-1: USB disconnect, device number 18 [ 1322.697934][ T10] usb usb1-port1: unable to enumerate USB device [ 1322.814389][ T5815] Bluetooth: hci1: command tx timeout [ 1323.032618][T21538] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3933'. [ 1323.111955][T21536] veth0: entered promiscuous mode [ 1323.117681][T21536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3932'. [ 1323.633847][ T5896] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1324.780894][T21554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1325.833884][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1325.833900][ T30] audit: type=1400 audit(2000000360.367:1511): avc: denied { write } for pid=21550 comm="syz.9.3937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1325.888161][ T5896] usb 9-1: Using ep0 maxpacket: 8 [ 1325.929090][ T5896] usb 9-1: config 127 has an invalid interface number: 171 but max is 1 [ 1325.971090][ T5896] usb 9-1: config 127 has no interface number 1 [ 1325.990884][ T5896] usb 9-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1326.004981][ T5896] usb 9-1: config 127 interface 0 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1326.026998][ T30] audit: type=1400 audit(2000000360.567:1512): avc: denied { connect } for pid=21559 comm="syz.9.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1326.149503][ T5896] usb 9-1: config 127 interface 171 has no altsetting 0 [ 1326.157308][ T5896] usb 9-1: config 127 interface 0 has no altsetting 0 [ 1326.174019][ T5896] usb 9-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1326.187318][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.197198][ T5896] usb 9-1: Product: syz [ 1326.615990][ T5896] usb 9-1: Manufacturer: syz [ 1326.622878][ T5896] usb 9-1: SerialNumber: syz [ 1326.737186][ T5896] usb 9-1: can't set config #127, error -71 [ 1326.754063][ T5896] usb 9-1: USB disconnect, device number 19 [ 1327.331104][ T30] audit: type=1400 audit(2000000361.867:1513): avc: denied { associate } for pid=21579 comm="syz.4.3943" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1328.297940][T21583] bond5: entered allmulticast mode [ 1328.303284][T21583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1328.380901][T21592] tmpfs: Bad value for 'mpol' [ 1328.406080][T21583] bridge0: port 3(bond5) entered blocking state [ 1328.427109][T21583] bridge0: port 3(bond5) entered disabled state [ 1328.462942][T21583] bond5: entered promiscuous mode [ 1328.474068][T21583] bridge0: port 3(bond5) entered blocking state [ 1328.480446][T21583] bridge0: port 3(bond5) entered forwarding state [ 1328.542544][T21598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.687600][T20678] bridge0: port 3(bond5) entered disabled state [ 1329.593880][T17607] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1329.903928][T21615] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1330.214062][T21617] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1330.723440][T17607] usb 10-1: device descriptor read/64, error -71 [ 1330.847308][T21624] netlink: 'syz.0.3956': attribute type 8 has an invalid length. [ 1330.973743][T17607] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1330.998725][T21631] random: crng reseeded on system resumption [ 1331.014925][T21631] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3959'. [ 1331.103545][T17607] usb 10-1: device descriptor read/64, error -71 [ 1331.263432][ T5896] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1331.464687][T17607] usb usb10-port1: attempt power cycle [ 1331.633464][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 1331.642977][ T5896] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1331.711927][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.770929][T21649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3963'. [ 1331.773322][ T5896] usb 1-1: Product: syz [ 1331.836354][T17607] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1331.864133][T17607] usb 10-1: device descriptor read/8, error -71 [ 1332.365201][ T5896] usb 1-1: Manufacturer: syz [ 1332.533347][ T5896] usb 1-1: SerialNumber: syz [ 1332.549221][ T5896] usb 1-1: config 0 descriptor?? [ 1332.573560][T17607] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1332.603631][T17607] usb 10-1: device descriptor read/8, error -71 [ 1332.713810][T17607] usb usb10-port1: unable to enumerate USB device [ 1332.994951][ T5896] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1333.018493][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1333.054732][ T5896] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1333.078327][ T5896] usb 1-1: media controller created [ 1333.130026][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1333.374638][T21658] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1333.763526][ T5896] zl10353_read_register: readreg error (reg=127, ret==0) [ 1333.770837][ T5896] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1333.778818][ T5896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1334.192295][T21671] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3966'. [ 1334.262413][ T5896] usb 1-1: USB disconnect, device number 7 [ 1334.321972][T21672] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3969'. [ 1334.356792][ T5896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1334.379692][T21674] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3970'. [ 1334.748026][ T5815] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1335.186625][ T30] audit: type=1400 audit(2000000369.727:1514): avc: denied { shutdown } for pid=21691 comm="syz.8.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1335.909661][T21704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1336.516655][T21706] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1336.843722][ T30] audit: type=1400 audit(2000000371.367:1515): avc: denied { create } for pid=21711 comm="syz.8.3982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1337.440903][T21719] binder: 21718:21719 ioctl 40946400 200000000b00 returned -22 [ 1337.455653][ T30] audit: type=1400 audit(2000000371.987:1516): avc: denied { connect } for pid=21710 comm="syz.4.3981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1337.541554][ T30] audit: type=1326 audit(2000000372.077:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.8.3987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f0e20385d67 code=0xffff0000 [ 1337.565064][ C1] vkms_vblank_simulate: vblank timer overrun [ 1339.538451][T21734] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3988'. [ 1339.553354][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3988'. [ 1339.607372][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3988'. [ 1339.796751][T21739] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3989'. [ 1339.809700][T21739] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3989'. [ 1339.830056][T21738] vxcan1: entered allmulticast mode [ 1340.179396][T21745] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3990'. [ 1340.431915][ T30] audit: type=1400 audit(2000000374.957:1518): avc: denied { setopt } for pid=21744 comm="syz.9.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1340.433839][T21746] siw: device registration error -23 [ 1340.603638][ T30] audit: type=1400 audit(2000000374.978:1519): avc: denied { listen } for pid=21744 comm="syz.9.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1340.628191][ T30] audit: type=1400 audit(2000000374.978:1520): avc: denied { ioctl } for pid=21744 comm="syz.9.3992" path="socket:[81224]" dev="sockfs" ino=81224 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1341.032141][T21757] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1342.003430][T21766] bond1: entered allmulticast mode [ 1342.027528][T21766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1342.055709][T21766] bridge0: port 3(bond1) entered blocking state [ 1342.123127][T21766] bridge0: port 3(bond1) entered disabled state [ 1342.131487][T21774] tmpfs: Bad value for 'mpol' [ 1342.139823][T21766] bond1: entered promiscuous mode [ 1342.146685][T21766] bridge0: port 3(bond1) entered blocking state [ 1342.153065][T21766] bridge0: port 3(bond1) entered forwarding state [ 1342.166906][T10911] bridge0: port 3(bond1) entered disabled state [ 1342.984783][ T10] IPVS: starting estimator thread 0... [ 1343.093740][T21781] IPVS: using max 37 ests per chain, 88800 per kthread [ 1343.350955][T21788] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1343.414677][ T5963] IPVS: starting estimator thread 0... [ 1343.429265][T21788] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1343.522956][T21795] IPVS: using max 41 ests per chain, 98400 per kthread [ 1344.001817][T21803] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4005'. [ 1346.128011][T21811] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1347.798602][T21819] lo speed is unknown, defaulting to 1000 [ 1347.816310][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4009'. [ 1347.874656][T21819] lo speed is unknown, defaulting to 1000 [ 1349.273997][ T30] audit: type=1400 audit(2000000383.768:1521): avc: denied { read } for pid=21835 comm="syz.0.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1351.390696][T21844] program syz.4.4015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1351.485846][ T30] audit: type=1326 audit(2000000386.018:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.9.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7903385d67 code=0x7ffc0000 [ 1351.622337][ T30] audit: type=1326 audit(2000000386.018:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.9.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f790332af79 code=0x7ffc0000 [ 1351.734508][ T30] audit: type=1326 audit(2000000386.018:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.9.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7903385d67 code=0x7ffc0000 [ 1351.959990][ T30] audit: type=1326 audit(2000000386.018:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.9.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f790332af79 code=0x7ffc0000 [ 1352.048412][ T30] audit: type=1326 audit(2000000386.018:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.9.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f790338eec9 code=0x7ffc0000 [ 1352.151057][ T30] audit: type=1326 audit(2000000386.018:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.9.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7903385d67 code=0x7ffc0000 [ 1352.215439][ T30] audit: type=1326 audit(2000000386.018:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.9.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f790332af79 code=0x7ffc0000 [ 1352.293505][ T30] audit: type=1326 audit(2000000386.018:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.9.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7903385d67 code=0x7ffc0000 [ 1352.553511][ T30] audit: type=1326 audit(2000000386.018:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.9.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f790332af79 code=0x7ffc0000 [ 1352.849725][T21865] ALSA: mixer_oss: invalid OSS volume '' [ 1352.855768][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1352.903265][T21871] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4023'. [ 1352.916046][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4023'. [ 1352.934004][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4023'. [ 1353.014826][ T10] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1353.026869][ T10] usb 1-1: config 0 has no interface number 0 [ 1353.100037][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1353.124189][T21875] loop2: detected capacity change from 0 to 7 [ 1353.136100][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.154249][ T10] usb 1-1: Product: syz [ 1353.162209][ T10] usb 1-1: Manufacturer: syz [ 1353.166977][ T10] usb 1-1: SerialNumber: syz [ 1353.260783][ T10] usb 1-1: config 0 descriptor?? [ 1353.424197][T21875] Dev loop2: unable to read RDB block 7 [ 1353.436095][T21875] loop2: AHDI p1 p2 p3 [ 1353.450669][T21875] loop2: partition table partially beyond EOD, truncated [ 1353.462287][T21875] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1353.499804][T21875] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1353.517995][T21882] netlink: 'syz.4.4027': attribute type 21 has an invalid length. [ 1353.536845][T21882] IPv6: NLM_F_CREATE should be specified when creating new route [ 1353.766552][T21885] netlink: 204 bytes leftover after parsing attributes in process `syz.9.4028'. [ 1356.099821][ T10] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1356.120584][ T10] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1356.136313][ T10] asix 1-1:0.251: probe with driver asix failed with error -71 [ 1356.147001][ T10] usb 1-1: USB disconnect, device number 8 [ 1356.601042][T21907] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1356.609351][T21907] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1357.171956][T13814] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1357.796931][T13814] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1357.811987][T13814] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1357.831132][T13814] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.849899][T13814] usb 1-1: config 220 has no interface number 2 [ 1357.871725][T13814] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1357.904853][T13814] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1357.924176][T13814] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1357.931078][T13814] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1357.944768][T13814] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1357.954879][T13814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.970584][T13814] usb 1-1: Product: syz [ 1357.986644][T13814] usb 1-1: Manufacturer: syz [ 1358.151417][T13814] usb 1-1: SerialNumber: syz [ 1358.728745][T13814] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1358.746831][T13814] uvcvideo 1-1:220.0: No valid video chain found. [ 1358.761958][T13814] usb 1-1: selecting invalid altsetting 0 [ 1358.912646][T13814] usb 1-1: selecting invalid altsetting 0 [ 1358.918930][T13814] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1358.930987][T13814] usb 1-1: USB disconnect, device number 9 [ 1360.017413][T21942] bond3: option ad_actor_sys_prio: invalid value (0) [ 1360.024376][T21942] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1360.073474][T21942] bond3 (unregistering): Released all slaves [ 1361.304074][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.361708][T17607] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1361.703190][T17607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1361.759300][T17607] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1361.807300][T17607] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1361.875328][T17607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.913545][T17607] usb 1-1: config 0 descriptor?? [ 1362.475092][T21991] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1362.974439][T17607] usbhid 1-1:0.0: can't add hid device: -71 [ 1362.980462][T17607] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1363.010806][T17607] usb 1-1: USB disconnect, device number 10 [ 1365.731798][T17607] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1365.799331][T22023] binder: 22022:22023 ioctl c018620c 2000000001c0 returned -1 [ 1365.988509][T13814] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1366.148843][T17607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1366.160337][T17607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.172212][T17607] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1366.182701][T17607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.193433][T17607] usb 1-1: config 0 descriptor?? [ 1366.293071][T13814] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1366.308674][T13814] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1366.349717][T13814] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1366.381446][T13814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.423981][T22021] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1366.439315][T13814] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1366.571211][T22032] trusted_key: encrypted_key: insufficient parameters specified [ 1366.580752][T22032] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4071'. [ 1366.591778][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4071'. [ 1366.634028][T17607] greenasia 0003:0E8F:0012.001E: item fetching failed at offset 6/7 [ 1366.652956][T17607] greenasia 0003:0E8F:0012.001E: parse failed [ 1366.993286][T17607] greenasia 0003:0E8F:0012.001E: probe with driver greenasia failed with error -22 [ 1367.018818][ T55] usb 10-1: USB disconnect, device number 24 [ 1367.044589][T17607] usb 1-1: USB disconnect, device number 11 [ 1368.184064][T22044] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1368.411403][T16540] Bluetooth: hci4: command 0x0406 tx timeout [ 1369.721378][T22081] binder_alloc: 22075: binder_alloc_buf, no vma [ 1369.731302][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1369.731319][ T30] audit: type=1400 audit(2000000405.263:1589): avc: denied { transfer } for pid=22075 comm="syz.4.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1370.673541][T22092] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4088'. [ 1370.795524][ T30] audit: type=1400 audit(2000000406.323:1590): avc: denied { getopt } for pid=22082 comm="syz.9.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1373.048698][T22119] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4096'. [ 1373.243884][T22122] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4097'. [ 1374.251034][ T55] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1374.460729][ T55] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1374.481101][ T55] usb 1-1: config 0 has no interface number 0 [ 1374.500278][ T55] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1375.331720][T22132] netlink: 'syz.9.4101': attribute type 3 has an invalid length. [ 1375.466029][ T55] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1375.485407][ T55] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1375.494537][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.502692][ T55] usb 1-1: Product: syz [ 1375.506925][ T55] usb 1-1: Manufacturer: syz [ 1375.512044][ T55] usb 1-1: SerialNumber: syz [ 1375.744464][ T55] usb 1-1: config 0 descriptor?? [ 1375.753659][T22133] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1375.772620][ T55] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1375.811011][ T5896] IPVS: starting estimator thread 0... [ 1375.832262][ T55] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1376.047294][T22153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4107'. [ 1376.050921][T22150] IPVS: using max 43 ests per chain, 103200 per kthread [ 1376.428898][T22133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.438267][T22133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.604484][T22164] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1377.442395][ T30] audit: type=1400 audit(2000000412.553:1591): avc: denied { getopt } for pid=22129 comm="syz.0.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1377.513552][T22167] bond2: entered allmulticast mode [ 1377.519265][T22167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1377.527113][T22167] bridge0: port 4(bond2) entered blocking state [ 1377.534217][T22167] bridge0: port 4(bond2) entered disabled state [ 1377.543136][T22167] bond2: entered promiscuous mode [ 1377.548844][T22167] bridge0: port 4(bond2) entered blocking state [ 1377.555219][T22167] bridge0: port 4(bond2) entered forwarding state [ 1377.603854][T20682] bridge0: port 4(bond2) entered disabled state [ 1377.606356][T22162] tmpfs: Bad value for 'mpol' [ 1378.930751][ T5896] usb 7-1: new full-speed USB device number 103 using dummy_hcd [ 1379.150563][ T10] usb 1-1: USB disconnect, device number 12 [ 1379.179379][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1379.223829][ T5896] usb 7-1: config 0 has no interfaces? [ 1379.227295][ T10] cyberjack 1-1:0.69: device disconnected [ 1379.233967][ T5896] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1379.267334][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.332397][T22189] tipc: Started in network mode [ 1379.337301][T22189] tipc: Node identity 9649dd42fb1b, cluster identity 4711 [ 1379.347363][ T5896] usb 7-1: config 0 descriptor?? [ 1379.406212][T22189] tipc: Enabled bearer , priority 0 [ 1379.461167][T22193] syzkaller0: entered promiscuous mode [ 1379.535864][T22193] syzkaller0: entered allmulticast mode [ 1380.520708][T13814] tipc: Node number set to 1834147138 [ 1380.793584][T22193] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4115'. [ 1380.841823][T13814] IPVS: starting estimator thread 0... [ 1380.929719][T22198] bond_slave_0: entered promiscuous mode [ 1380.935464][T22198] bond_slave_1: entered promiscuous mode [ 1381.017527][T22200] IPVS: using max 46 ests per chain, 110400 per kthread [ 1381.075892][T22198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1381.085299][T22198] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 1382.450066][ T55] usb 7-1: USB disconnect, device number 103 [ 1382.459448][T22189] tipc: Resetting bearer [ 1382.557488][T22184] tipc: Resetting bearer [ 1382.690016][T22211] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4121'. [ 1382.768870][T22184] tipc: Disabling bearer [ 1383.139452][ T5896] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1383.169052][ T5896] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1383.785983][ T30] audit: type=1400 audit(2000000420.332:1592): avc: denied { accept } for pid=22231 comm="syz.0.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1383.905691][T22235] tipc: Failed to obtain node identity [ 1383.930997][T22235] tipc: Enabling of bearer rejected, failed to enable media [ 1384.189194][T22241] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4131'. [ 1384.299698][ T30] audit: type=1400 audit(2000000420.842:1593): avc: denied { map } for pid=22246 comm="syz.9.4133" path="socket:[83354]" dev="sockfs" ino=83354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1384.602352][ T30] audit: type=1400 audit(2000000421.142:1594): avc: denied { read write } for pid=22250 comm="syz.9.4134" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1384.630737][ T30] audit: type=1400 audit(2000000421.142:1595): avc: denied { open } for pid=22250 comm="syz.9.4134" path="/116/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1384.654119][T22251] [ 1385.109514][T22260] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4137'. [ 1386.408626][ T10] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1386.570332][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1386.578684][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.848094][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1386.866224][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 1386.876927][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.885327][ T10] usb 7-1: Product: syz [ 1386.889502][ T10] usb 7-1: Manufacturer: syz [ 1386.893747][T22283] sctp: [Deprecated]: syz.9.4145 (pid 22283) Use of int in max_burst socket option. [ 1386.893747][T22283] Use struct sctp_assoc_value instead [ 1386.896579][ T10] usb 7-1: SerialNumber: syz [ 1386.914246][T17607] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1387.101081][T17607] usb 9-1: Using ep0 maxpacket: 8 [ 1387.118738][T17607] usb 9-1: config 0 has no interfaces? [ 1387.134426][T17607] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1387.145311][T17607] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.287127][T17607] usb 9-1: config 0 descriptor?? [ 1387.287154][T22264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.306948][T22264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.020891][ T55] usb 9-1: USB disconnect, device number 20 [ 1388.056131][ T10] usb 7-1: 0:2 : does not exist [ 1388.075108][ T10] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1388.098419][ T10] usb 7-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1388.160530][ T10] usb 7-1: USB disconnect, device number 104 [ 1388.505269][T22299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=22299 comm=syz.4.4149 [ 1388.565804][T22299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=22299 comm=syz.4.4149 [ 1388.579525][T22299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=22299 comm=syz.4.4149 [ 1388.596293][T22299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=22299 comm=syz.4.4149 [ 1388.609364][T22299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=22299 comm=syz.4.4149 [ 1388.648048][T22299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=22299 comm=syz.4.4149 [ 1388.692672][T22299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=22299 comm=syz.4.4149 [ 1388.706150][T22299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=22299 comm=syz.4.4149 [ 1388.876677][T22304] netlink: 168 bytes leftover after parsing attributes in process `syz.9.4150'. [ 1389.922583][ T10] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1390.515494][T22324] ceph: No mds server is up or the cluster is laggy [ 1390.522682][T17607] libceph: connect (1)[c::]:6789 error -101 [ 1390.536091][T17607] libceph: mon0 (1)[c::]:6789 connect error [ 1390.581825][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1390.598063][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1390.622590][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1390.632309][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.708415][ T10] usb 9-1: Product: syz [ 1390.722398][ T10] usb 9-1: Manufacturer: syz [ 1390.732882][ T10] usb 9-1: SerialNumber: syz [ 1390.742373][T22316] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1390.773155][T22335] FAULT_INJECTION: forcing a failure. [ 1390.773155][T22335] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.786029][T22335] CPU: 1 UID: 0 PID: 22335 Comm: syz.0.4158 Not tainted syzkaller #0 PREEMPT(full) [ 1390.786054][T22335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1390.786061][T22335] Call Trace: [ 1390.786067][T22335] [ 1390.786072][T22335] dump_stack_lvl+0x16c/0x1f0 [ 1390.786091][T22335] should_fail_ex+0x512/0x640 [ 1390.786105][T22335] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1390.786132][T22335] should_failslab+0xc2/0x120 [ 1390.786157][T22335] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1390.786178][T22335] ? rcu_is_watching+0x12/0xc0 [ 1390.786194][T22335] ? ovl_do_parse_layer+0x33/0x1290 [ 1390.786211][T22335] ? kstrdup+0x53/0x100 [ 1390.786223][T22335] kstrdup+0x53/0x100 [ 1390.786237][T22335] ovl_do_parse_layer+0x33/0x1290 [ 1390.786250][T22335] ? ovl_mount_dir+0x15a/0x1f0 [ 1390.786270][T22335] ovl_parse_param+0xdd9/0x1570 [ 1390.786296][T22335] ? __pfx_ovl_parse_param+0x10/0x10 [ 1390.786316][T22335] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 1390.786339][T22335] ? static_key_count+0x5a/0x70 [ 1390.786355][T22335] ? __pfx_ovl_parse_param+0x10/0x10 [ 1390.786369][T22335] vfs_parse_fs_param+0x20b/0x3c0 [ 1390.786387][T22335] vfs_parse_fs_qstr+0x138/0x1c0 [ 1390.786405][T22335] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 1390.786437][T22335] ? ovl_next_opt+0x143/0x1c0 [ 1390.786456][T22335] ? __pfx_ovl_next_opt+0x10/0x10 [ 1390.786473][T22335] vfs_parse_monolithic_sep+0x18d/0x210 [ 1390.786493][T22335] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 1390.786511][T22335] ? alloc_fs_context+0x59b/0x9c0 [ 1390.786529][T22335] path_mount+0x768/0x23a0 [ 1390.786550][T22335] ? __pfx_path_mount+0x10/0x10 [ 1390.786577][T22335] ? kmem_cache_free+0x2d4/0x6c0 [ 1390.786595][T22335] ? putname+0x154/0x1a0 [ 1390.786622][T22335] ? putname+0x154/0x1a0 [ 1390.786639][T22335] ? putname+0x154/0x1a0 [ 1390.786656][T22335] ? __x64_sys_mount+0x293/0x310 [ 1390.786671][T22335] __x64_sys_mount+0x293/0x310 [ 1390.786687][T22335] ? __pfx___x64_sys_mount+0x10/0x10 [ 1390.786720][T22335] do_syscall_64+0xcd/0xfa0 [ 1390.786741][T22335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.786758][T22335] RIP: 0033:0x7f412818eec9 [ 1390.786771][T22335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.786783][T22335] RSP: 002b:00007f412910b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1390.786794][T22335] RAX: ffffffffffffffda RBX: 00007f41283e5fa0 RCX: 00007f412818eec9 [ 1390.786801][T22335] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1390.786808][T22335] RBP: 00007f412910b090 R08: 0000200000000500 R09: 0000000000000000 [ 1390.786814][T22335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1390.786826][T22335] R13: 00007f41283e6038 R14: 00007f41283e5fa0 R15: 00007ffe699758b8 [ 1390.786847][T22335] [ 1391.461954][T22341] bond6: entered promiscuous mode [ 1391.467013][T22341] bond6: entered allmulticast mode [ 1391.472954][T22341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1391.821943][ T5963] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1391.880131][ T55] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1391.959990][ T5963] usb 10-1: device descriptor read/64, error -71 [ 1392.031217][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.042287][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.046263][ T10] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1392.054640][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1392.059474][ T10] cdc_ncm 9-1:1.0: setting tx_max = 16384 [ 1392.079177][ T55] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1392.088754][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.099543][ T55] usb 7-1: config 0 descriptor?? [ 1392.230007][ T5963] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1392.274062][ T10] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1392.292956][ T10] usb 9-1: USB disconnect, device number 21 [ 1392.299737][ T10] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 1392.370007][ T5963] usb 10-1: device descriptor read/64, error -71 [ 1392.492003][ T5963] usb usb10-port1: attempt power cycle [ 1392.516151][ T55] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1392.550007][ T5896] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1392.710062][ T5896] usb 1-1: Using ep0 maxpacket: 16 [ 1392.720008][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.730277][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1392.742231][ T5896] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 1392.751325][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.759289][ T5896] usb 1-1: Product: syz [ 1392.763990][ T5896] usb 1-1: Manufacturer: syz [ 1392.768588][ T5896] usb 1-1: SerialNumber: syz [ 1392.850343][ T5963] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1392.890358][ T5963] usb 10-1: device descriptor read/8, error -71 [ 1392.956527][T22360] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4166'. [ 1393.134820][T22356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.161294][T22356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.190795][ T5963] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1393.215157][T22361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.240501][T22361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.250619][ T5963] usb 10-1: device descriptor read/8, error -71 [ 1393.283058][ T5896] usb 1-1: 0:2 : does not exist [ 1393.294118][ T5896] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1393.307032][ T5896] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1393.331337][T22363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1393.358327][ T5896] usb 1-1: USB disconnect, device number 13 [ 1393.365360][ T5963] usb usb10-port1: unable to enumerate USB device [ 1393.384002][T17607] usb 7-1: USB disconnect, device number 105 [ 1393.932249][T22371] netlink: 'syz.8.4169': attribute type 5 has an invalid length. [ 1395.590314][ T30] audit: type=1400 audit(2000000432.113:1596): avc: denied { lock } for pid=22397 comm="syz.0.4177" path="socket:[83643]" dev="sockfs" ino=83643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1397.219471][T22429] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1397.238264][T22430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.246929][T22430] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56317 sclass=netlink_xfrm_socket pid=22430 comm=syz.6.4185 [ 1397.290409][T22430] netlink: 'syz.6.4185': attribute type 1 has an invalid length. [ 1397.668277][T22432] input: syz1 as /devices/virtual/input/input98 [ 1398.226070][T22429] netlink: 'syz.9.4186': attribute type 7 has an invalid length. [ 1400.488440][T22467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4194'. [ 1402.114516][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4200'. [ 1402.276302][T22498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4201'. [ 1402.493482][T22495] netlink: 'syz.4.4203': attribute type 1 has an invalid length. [ 1402.565186][T22495] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1403.280703][T22513] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1404.452559][ T5896] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1404.929274][ T5896] usb 9-1: device descriptor read/64, error -71 [ 1405.179246][ T5896] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1405.437591][T16540] Bluetooth: hci3: command 0x0406 tx timeout [ 1405.699799][T22540] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1405.799239][ T5896] usb 9-1: device descriptor read/64, error -71 [ 1405.920164][ T5896] usb usb9-port1: attempt power cycle [ 1406.020358][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'. [ 1406.069961][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'. [ 1406.279373][ T5896] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1406.323989][ T5896] usb 9-1: device descriptor read/8, error -71 [ 1406.609496][ T5896] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1406.701339][ T5896] usb 9-1: device descriptor read/8, error -71 [ 1406.759612][ T5963] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1406.957279][ T5896] usb usb9-port1: unable to enumerate USB device [ 1407.039522][ T5963] usb 10-1: Using ep0 maxpacket: 32 [ 1407.060965][ T5963] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1407.099461][ T5963] usb 10-1: config 2 has an invalid interface number: 204 but max is 0 [ 1407.128961][ T5963] usb 10-1: config 2 has no interface number 0 [ 1407.140281][ T5963] usb 10-1: config 2 interface 204 has no altsetting 0 [ 1407.412529][ T5963] usb 10-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=d1.f9 [ 1407.557512][ T5963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.576753][ T5963] usb 10-1: Product: syz [ 1407.582432][ T5963] usb 10-1: Manufacturer: syz [ 1407.587491][ T5963] usb 10-1: SerialNumber: syz [ 1407.636384][T22569] xfrm0: entered promiscuous mode [ 1407.641950][T22569] xfrm0: entered allmulticast mode [ 1407.678335][T22569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1408.144263][ T5963] ir_toy 10-1:2.204: required endpoints not found [ 1408.162956][ T5963] usb 10-1: USB disconnect, device number 29 [ 1409.377872][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 1410.177107][T22598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.186422][T22598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.203040][T22600] FAULT_INJECTION: forcing a failure. [ 1410.203040][T22600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.216372][T22600] CPU: 1 UID: 0 PID: 22600 Comm: syz.4.4228 Not tainted syzkaller #0 PREEMPT(full) [ 1410.216397][T22600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1410.216409][T22600] Call Trace: [ 1410.216415][T22600] [ 1410.216423][T22600] dump_stack_lvl+0x16c/0x1f0 [ 1410.216449][T22600] should_fail_ex+0x512/0x640 [ 1410.216475][T22600] _copy_from_user+0x2e/0xd0 [ 1410.216497][T22600] kstrtouint_from_user+0xd6/0x1d0 [ 1410.216514][T22600] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1410.216548][T22600] ? __lock_acquire+0xb8a/0x1c90 [ 1410.216586][T22600] proc_fail_nth_write+0x83/0x220 [ 1410.216622][T22600] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1410.216656][T22600] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1410.216679][T22600] vfs_write+0x2a0/0x11d0 [ 1410.216712][T22600] ? __pfx___mutex_lock+0x10/0x10 [ 1410.216736][T22600] ? __pfx_vfs_write+0x10/0x10 [ 1410.216766][T22600] ? __fget_files+0x20e/0x3c0 [ 1410.216805][T22600] ksys_write+0x12a/0x250 [ 1410.216827][T22600] ? __pfx_ksys_write+0x10/0x10 [ 1410.216858][T22600] do_syscall_64+0xcd/0xfa0 [ 1410.216880][T22600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.216898][T22600] RIP: 0033:0x7f93b4b8d97f [ 1410.216919][T22600] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1410.216936][T22600] RSP: 002b:00007f93b5a4b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1410.216955][T22600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f93b4b8d97f [ 1410.216966][T22600] RDX: 0000000000000001 RSI: 00007f93b5a4b0a0 RDI: 0000000000000005 [ 1410.216977][T22600] RBP: 00007f93b5a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.216988][T22600] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1410.216999][T22600] R13: 00007f93b4de6038 R14: 00007f93b4de5fa0 R15: 00007ffe96110b08 [ 1410.217026][T22600] [ 1410.469634][ T10] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1410.691162][ T10] usb 7-1: config 14 has an invalid interface number: 21 but max is 0 [ 1410.699457][ T10] usb 7-1: config 14 has no interface number 0 [ 1410.705639][ T10] usb 7-1: config 14 interface 21 has no altsetting 0 [ 1410.714351][ T10] usb 7-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 1410.723638][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.732527][ T10] usb 7-1: Product: syz [ 1410.737198][ T10] usb 7-1: Manufacturer: syz [ 1410.742230][ T10] usb 7-1: SerialNumber: syz [ 1410.758924][ T5963] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1410.778960][ T5896] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1410.909079][ T5963] usb 10-1: Using ep0 maxpacket: 16 [ 1410.915713][ T5963] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.926064][ T5963] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.937258][ T5963] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.947578][ T5963] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1410.961790][ T5963] usb 10-1: config 7 interface 0 has no altsetting 0 [ 1410.968058][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1410.968613][ T5963] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1410.982074][ T10] usb 7-1: MIDIStreaming interface descriptor not found [ 1410.985176][ T5963] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.000520][ T5896] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1411.008706][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1411.013782][ T10] usb 7-1: USB disconnect, device number 106 [ 1411.028958][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1411.041923][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1411.049950][ T5896] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1411.059178][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.074085][ T5896] usb 1-1: config 0 descriptor?? [ 1411.079936][T22607] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1411.465058][T22615] netlink: 666 bytes leftover after parsing attributes in process `syz.8.4234'. [ 1411.488067][ T5963] input: HID 0458:5010 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.0/0003:0458:5010.0021/input/input99 [ 1411.511629][ T5896] cougar 0003:060B:700A.0022: unknown main item tag 0x0 [ 1411.518621][ T5896] cougar 0003:060B:700A.0022: unknown main item tag 0x0 [ 1411.526850][ T5896] cougar 0003:060B:700A.0022: unknown main item tag 0x0 [ 1411.537805][ T5896] cougar 0003:060B:700A.0022: unknown main item tag 0x0 [ 1411.549515][ T5896] cougar 0003:060B:700A.0022: unknown main item tag 0x0 [ 1411.559723][ T5896] cougar 0003:060B:700A.0022: unknown main item tag 0x0 [ 1411.567018][ T5896] cougar 0003:060B:700A.0022: unknown main item tag 0x0 [ 1411.576586][ T5896] cougar 0003:060B:700A.0022: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.0-1/input0 [ 1411.576728][ T30] audit: type=1400 audit(2000000448.124:1597): avc: denied { name_connect } for pid=22616 comm="syz.8.4235" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1411.635840][ T5963] kye 0003:0458:5010.0021: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.9-1/input0 [ 1411.710182][T22607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.719033][T22607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.728733][ T5963] usb 1-1: USB disconnect, device number 14 [ 1411.742006][T22605] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4229'. [ 1412.612114][ C1] kye 0003:0458:5010.0021: usb_submit_urb(ctrl) failed: -1 [ 1412.839801][T22630] xt_hashlimit: max too large, truncated to 1048576 [ 1412.859664][T22626] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4238'. [ 1412.880228][T22626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.478839][T13814] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1413.478839][ T5896] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1413.642124][T13814] usb 9-1: Using ep0 maxpacket: 8 [ 1413.652872][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1413.673145][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.749292][ T5896] usb 7-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 1413.759247][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.912539][ T10] usb 10-1: USB disconnect, device number 30 [ 1413.928098][T13814] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1413.939547][T13814] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1413.959774][T13814] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1413.959858][ T5896] usb 7-1: config 0 descriptor?? [ 1413.969849][T13814] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1413.969879][T13814] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1413.969925][T13814] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1414.007851][T13814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.171207][T22647] SELinux: failed to load policy [ 1414.229510][T13814] usb 9-1: usb_control_msg returned -32 [ 1414.251591][T13814] usbtmc 9-1:16.0: can't read capabilities [ 1414.398979][ T10] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1414.433552][ T5896] waltop 0003:172F:0038.0023: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.6-1/input0 [ 1414.505831][T22657] usb usb5: usbfs: process 22657 (syz.0.4246) did not claim interface 0 before use [ 1414.629526][T22634] o2cb: This node has not been configured. [ 1414.635357][T22634] o2cb: Cluster check failed. Fix errors before retrying. [ 1414.642532][T22634] (syz.6.4240,22634,1):user_dlm_register:674 ERROR: status = -22 [ 1414.650734][T22634] (syz.6.4240,22634,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1414.748927][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1414.938306][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.957732][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1414.971581][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 1414.985744][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.995174][ T10] usb 10-1: Product: syz [ 1414.999871][ T10] usb 10-1: Manufacturer: syz [ 1415.004726][ T10] usb 10-1: SerialNumber: syz [ 1415.274519][T22649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.308232][T22649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.771972][T17607] usb 7-1: USB disconnect, device number 107 [ 1415.837942][ T10] usb 10-1: 0:2 : does not exist [ 1415.881029][ T10] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1416.007028][ T10] usb 10-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1416.033133][ T10] usb 10-1: USB disconnect, device number 31 [ 1416.555777][T17607] usb 9-1: USB disconnect, device number 26 [ 1417.309044][ T30] audit: type=1326 audit(2000000453.734:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22678 comm="syz.9.4254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f790338eec9 code=0x0 [ 1417.463275][T22686] FAULT_INJECTION: forcing a failure. [ 1417.463275][T22686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1417.490802][T22686] CPU: 0 UID: 0 PID: 22686 Comm: syz.4.4255 Not tainted syzkaller #0 PREEMPT(full) [ 1417.490827][T22686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1417.490838][T22686] Call Trace: [ 1417.490844][T22686] [ 1417.490850][T22686] dump_stack_lvl+0x16c/0x1f0 [ 1417.490875][T22686] should_fail_ex+0x512/0x640 [ 1417.490905][T22686] _copy_from_user+0x2e/0xd0 [ 1417.490927][T22686] move_addr_to_kernel+0x65/0x170 [ 1417.490954][T22686] __copy_msghdr+0x386/0x470 [ 1417.490973][T22686] copy_msghdr_from_user+0xc1/0x160 [ 1417.490994][T22686] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1417.491020][T22686] ? __pfx__kstrtoull+0x10/0x10 [ 1417.491051][T22686] ___sys_sendmsg+0xfe/0x1d0 [ 1417.491075][T22686] ? __pfx____sys_sendmsg+0x10/0x10 [ 1417.491107][T22686] ? find_held_lock+0x2b/0x80 [ 1417.491138][T22686] __sys_sendmmsg+0x200/0x420 [ 1417.491162][T22686] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1417.491190][T22686] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1417.491223][T22686] ? fput+0x9b/0xd0 [ 1417.491240][T22686] ? ksys_write+0x1ac/0x250 [ 1417.491261][T22686] ? __pfx_ksys_write+0x10/0x10 [ 1417.491288][T22686] __x64_sys_sendmmsg+0x9c/0x100 [ 1417.491308][T22686] ? lockdep_hardirqs_on+0x7c/0x110 [ 1417.491329][T22686] do_syscall_64+0xcd/0xfa0 [ 1417.491352][T22686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.491369][T22686] RIP: 0033:0x7f93b4b8eec9 [ 1417.491385][T22686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1417.491403][T22686] RSP: 002b:00007f93b5a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1417.491421][T22686] RAX: ffffffffffffffda RBX: 00007f93b4de5fa0 RCX: 00007f93b4b8eec9 [ 1417.491433][T22686] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000b [ 1417.491444][T22686] RBP: 00007f93b5a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 1417.491454][T22686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1417.491463][T22686] R13: 00007f93b4de6038 R14: 00007f93b4de5fa0 R15: 00007ffe96110b08 [ 1417.491488][T22686] [ 1417.742680][T22690] netlink: 512 bytes leftover after parsing attributes in process `syz.8.4256'. [ 1418.742422][T22714] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4263'. [ 1419.026177][T22718] lo speed is unknown, defaulting to 1000 [ 1419.036269][T22718] lo speed is unknown, defaulting to 1000 [ 1419.971189][T22726] tmpfs: Bad value for 'mpol' [ 1420.197785][T22736] FAULT_INJECTION: forcing a failure. [ 1420.197785][T22736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.256314][T22736] CPU: 0 UID: 0 PID: 22736 Comm: syz.6.4268 Not tainted syzkaller #0 PREEMPT(full) [ 1420.256343][T22736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1420.256354][T22736] Call Trace: [ 1420.256361][T22736] [ 1420.256369][T22736] dump_stack_lvl+0x16c/0x1f0 [ 1420.256396][T22736] should_fail_ex+0x512/0x640 [ 1420.256422][T22736] _copy_from_user+0x2e/0xd0 [ 1420.256446][T22736] iommufd_fops_ioctl+0x2f5/0x540 [ 1420.256475][T22736] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1420.256504][T22736] ? hook_file_ioctl_common+0x145/0x410 [ 1420.256529][T22736] ? selinux_file_ioctl+0x180/0x270 [ 1420.256553][T22736] ? selinux_file_ioctl+0xb4/0x270 [ 1420.256578][T22736] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1420.256605][T22736] __x64_sys_ioctl+0x18e/0x210 [ 1420.256628][T22736] do_syscall_64+0xcd/0xfa0 [ 1420.256650][T22736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.256669][T22736] RIP: 0033:0x7f4f2bf8eec9 [ 1420.256684][T22736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1420.256702][T22736] RSP: 002b:00007f4f2ceeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.256719][T22736] RAX: ffffffffffffffda RBX: 00007f4f2c1e5fa0 RCX: 00007f4f2bf8eec9 [ 1420.256731][T22736] RDX: 0000200000000200 RSI: 0000000000003b84 RDI: 0000000000000003 [ 1420.256743][T22736] RBP: 00007f4f2ceeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1420.256753][T22736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1420.256763][T22736] R13: 00007f4f2c1e6038 R14: 00007f4f2c1e5fa0 R15: 00007ffe12a7e3a8 [ 1420.256790][T22736] [ 1420.453351][T22740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=549 sclass=netlink_route_socket pid=22740 comm=syz.8.4271 [ 1420.810382][T13814] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1420.991060][T13814] usb 7-1: Using ep0 maxpacket: 16 [ 1421.000054][T13814] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.010953][T13814] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1421.028374][T13814] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1421.039571][T13814] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1421.051718][T13814] usb 7-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1421.067822][T13814] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1421.328538][T13814] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1421.378624][T13814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.394745][T13814] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 1422.855851][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.102517][T22775] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1423.358771][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4282'. [ 1423.768261][ T5963] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1423.848857][T17607] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1424.028353][ T5963] usb 9-1: Using ep0 maxpacket: 16 [ 1424.028466][T17607] usb 10-1: device descriptor read/64, error -71 [ 1424.034947][ T5963] usb 9-1: config 0 has an invalid interface number: 237 but max is 0 [ 1424.221428][ T5963] usb 9-1: config 0 has no interface number 0 [ 1424.231545][ T5963] usb 9-1: config 0 interface 237 has no altsetting 0 [ 1424.240624][ T5963] usb 9-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1424.250242][ T5963] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.258357][ T5963] usb 9-1: Product: syz [ 1424.262586][ T5963] usb 9-1: Manufacturer: syz [ 1424.267151][ T5963] usb 9-1: SerialNumber: syz [ 1424.299755][ T5963] usb 9-1: config 0 descriptor?? [ 1424.309184][ T5963] snd_usb_podhd 9-1:0.237: Line 6 POD HD300 found [ 1424.330989][T13814] usb 7-1: USB disconnect, device number 108 [ 1424.348408][T17607] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1424.504567][T17607] usb 10-1: device descriptor read/64, error -71 [ 1424.563937][ T5963] snd_usb_podhd 9-1:0.237: cannot get proper max packet size [ 1424.681394][T17607] usb usb10-port1: attempt power cycle [ 1424.714220][ T5963] snd_usb_podhd 9-1:0.237: Line 6 POD HD300 now disconnected [ 1424.724982][ T5963] snd_usb_podhd 9-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 1424.850791][ T5963] usb 9-1: USB disconnect, device number 27 [ 1424.949593][T13814] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1425.262256][T17607] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1425.304408][T17607] usb 10-1: device descriptor read/8, error -71 [ 1425.414568][T13814] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1425.442991][T13814] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1425.454615][T13814] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1425.476299][T13814] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1425.486612][T13814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.497652][T13814] usb 7-1: Product: ã¡ [ 1425.502284][T13814] usb 7-1: Manufacturer: á¾ëŽ§í‘Šâµ±ë—–簆ﭕ◶⦉櫲ã¬è¿•àº âƒ¡æ¶®æ¡§á€¡Ç²è±Œê¤’㬛滮任〽ዻ꼿î¸ëº¤ï»«îˆá«¿æ³ƒè¨Œëµžà½…ì²ç¹±éŽ¬è¿£åƒƒä¯–ä†ã ¡ì—¤ê˜è®’먆려撀ï’죞忽磠é¯å °îµ…车閞콮ï’蘙犓ê¢â”­è±œë²µë‡”콯᫵盜ॠ䃗껔׸眱쇹㊢礠嘻昤닚࢈凷㩠â˜ë²¿ä±¯ç«žçŒ›ê© ë±‡ç³šë¦¡í–½è»¶è•¢ï·Œæ¼¡ê˜ºé•æ–陬⼃é°ïˆ˜é¹®ì·¥á–¼å™ã…¨ã°î¸‡á½¢ï‡¾å…¡ä·®é—㯼㎕ [ 1425.552985][T17607] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1425.562990][T13814] usb 7-1: SerialNumber: ì›â¾…巬밃à«æ‡”䄎垠価ꒆï²á²ïƒ½ä™²â›¹îžƒîš¹é¾¨ê¾¶â™…ɕ䜾澷ﲆîŠë£›ã˜ï¢«ê–¤Ñ”â¡£â¥â´¸ê²Œá‘¬ê™ˆà¾‹è¾„á·åœ–숺ㆋå”칾㡒爔ᵽ랷鋦䂀辇ã¨â»…霘瑪禜å…èŸá¤¤è–¡ç‘½ëŽ¥æ¤ŸãŽêš¸é¡±ê´« [ 1426.136052][T17607] usb 10-1: device descriptor read/8, error -71 [ 1426.249267][T17607] usb usb10-port1: unable to enumerate USB device [ 1426.545669][T13814] cdc_ncm 7-1:1.0: bind() failure [ 1426.710458][T13814] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1426.737131][T13814] cdc_ncm 7-1:1.1: bind() failure [ 1426.751974][T13814] usb 7-1: USB disconnect, device number 109 [ 1426.778050][ T55] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1427.159552][ T55] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1427.177760][ T55] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1427.211195][ T55] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1427.221604][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.598774][T13814] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1427.804134][T13814] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1427.892120][T13814] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1427.907512][ T55] usb 1-1: usb_control_msg returned -32 [ 1427.913231][ T55] usbtmc 1-1:16.0: can't read capabilities [ 1427.956134][T13814] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1427.990797][T13814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.024020][T22822] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1428.189205][T13814] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1428.200374][ T55] usb 1-1: USB disconnect, device number 15 [ 1428.308976][T13814] usb 10-1: USB disconnect, device number 36 [ 1428.679373][T22843] binder: 22836:22843 ioctl 400c620e 200000000240 returned -22 [ 1429.556142][ T30] audit: type=1400 audit(2000000465.895:1599): avc: denied { listen } for pid=22842 comm="syz.0.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1429.939737][ T55] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1430.108280][ T55] usb 9-1: Using ep0 maxpacket: 32 [ 1430.158353][ T55] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.356719][ T55] usb 9-1: config 0 has no interfaces? [ 1430.362466][ T55] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1430.371706][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.381979][ T55] usb 9-1: config 0 descriptor?? [ 1430.418466][T13814] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1431.349589][T13814] usb 10-1: device descriptor read/64, error -71 [ 1431.467106][ T10] usb 9-1: USB disconnect, device number 28 [ 1433.241110][T13814] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1437.644358][T22933] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4324'. [ 1437.653642][T22933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4324'. [ 1438.012071][ T30] audit: type=1400 audit(2000000474.555:1600): avc: denied { setopt } for pid=22919 comm="syz.6.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1440.037338][T13814] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1440.277374][T22959] comedi comedi3: comedi_config --init_data is deprecated [ 1440.638610][T13814] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1440.657640][T13814] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1440.709143][T13814] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1440.727437][T13814] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.755358][T13814] usb 10-1: Product: syz [ 1440.768901][T13814] usb 10-1: Manufacturer: syz [ 1440.773618][T13814] usb 10-1: SerialNumber: syz [ 1440.873019][T13814] usb 10-1: config 0 descriptor?? [ 1440.878260][ T30] audit: type=1400 audit(2000000477.425:1601): avc: denied { ioctl } for pid=22962 comm="syz.6.4334" path="socket:[85299]" dev="sockfs" ino=85299 ioctlcmd=0x5456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1441.014497][T22963] tipc: Enabling of bearer rejected, failed to enable media [ 1441.061057][ T30] audit: type=1400 audit(2000000477.605:1602): avc: denied { write } for pid=22962 comm="syz.6.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1441.123441][T22954] GUP no longer grows the stack in syz.9.4331 (22954): 200000005000-200000008000 (200000004000) [ 1441.135096][T22954] CPU: 0 UID: 0 PID: 22954 Comm: syz.9.4331 Not tainted syzkaller #0 PREEMPT(full) [ 1441.135129][T22954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1441.135141][T22954] Call Trace: [ 1441.135148][T22954] [ 1441.135155][T22954] dump_stack_lvl+0x16c/0x1f0 [ 1441.135185][T22954] gup_vma_lookup+0x1d2/0x220 [ 1441.135214][T22954] fixup_user_fault+0x26e/0x540 [ 1441.135242][T22954] ? futex_lock_pi+0x678/0x7c0 [ 1441.135272][T22954] fault_in_user_writeable+0x70/0xe0 [ 1441.135296][T22954] futex_lock_pi+0x681/0x7c0 [ 1441.135337][T22954] ? __pfx_futex_lock_pi+0x10/0x10 [ 1441.135363][T22954] ? __futex_wait+0x24b/0x2f0 [ 1441.135414][T22954] ? futex_private_hash_put+0x18a/0x300 [ 1441.135440][T22954] ? __pfx_futex_wake_mark+0x10/0x10 [ 1441.135473][T22954] ? errseq_sample+0x53/0x70 [ 1441.135495][T22954] ? file_init_path+0x4fe/0x760 [ 1441.135530][T22954] do_futex+0x11a/0x350 [ 1441.135555][T22954] ? __pfx_do_futex+0x10/0x10 [ 1441.135577][T22954] ? fd_install+0x225/0x750 [ 1441.135607][T22954] __x64_sys_futex+0x1e0/0x4c0 [ 1441.135631][T22954] ? __sys_socket+0xac/0x260 [ 1441.135656][T22954] ? __fget_files+0x20e/0x3c0 [ 1441.135680][T22954] ? __pfx___x64_sys_futex+0x10/0x10 [ 1441.135705][T22954] ? xfd_validate_state+0x61/0x180 [ 1441.135735][T22954] do_syscall_64+0xcd/0xfa0 [ 1441.135760][T22954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.135779][T22954] RIP: 0033:0x7f790338eec9 [ 1441.135796][T22954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.135814][T22954] RSP: 002b:00007f7904147038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1441.135833][T22954] RAX: ffffffffffffffda RBX: 00007f79035e5fa0 RCX: 00007f790338eec9 [ 1441.135845][T22954] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1441.135856][T22954] RBP: 00007f7903411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1441.135868][T22954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.135886][T22954] R13: 00007f79035e6038 R14: 00007f79035e5fa0 R15: 00007ffcf4494608 [ 1441.135914][T22954] [ 1441.344304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.425654][T13814] usb 10-1: USB disconnect, device number 39 [ 1441.736617][T22977] loop6: detected capacity change from 0 to 2560 [ 1441.745237][T22977] buffer_io_error: 6 callbacks suppressed [ 1441.745267][T22977] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.760048][T22977] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.768776][T22977] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.777012][T22977] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.785443][T22977] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.793858][T22977] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.802246][T22977] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.810839][T22977] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.819332][T22977] ldm_validate_partition_table(): Disk read failed. [ 1441.826122][T22977] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.856044][T22977] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.865336][T22977] Dev loop6: unable to read RDB block 0 [ 1441.872775][T22977] loop6: unable to read partition table [ 1441.879261][T22977] loop_reread_partitions: partition scan of loop6 (3Ÿ‚ ¾‚³˜) failed (rc=-5) [ 1442.609068][T22989] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4341'. [ 1442.618145][T22989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1442.682584][T22989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.274563][T23002] FAULT_INJECTION: forcing a failure. [ 1443.274563][T23002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.287853][T23002] CPU: 1 UID: 0 PID: 23002 Comm: syz.9.4343 Not tainted syzkaller #0 PREEMPT(full) [ 1443.287870][T23002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1443.287878][T23002] Call Trace: [ 1443.287883][T23002] [ 1443.287887][T23002] dump_stack_lvl+0x16c/0x1f0 [ 1443.287905][T23002] should_fail_ex+0x512/0x640 [ 1443.287922][T23002] _copy_to_user+0x32/0xd0 [ 1443.287937][T23002] simple_read_from_buffer+0xcb/0x170 [ 1443.287953][T23002] proc_fail_nth_read+0x197/0x240 [ 1443.287970][T23002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1443.287987][T23002] ? rw_verify_area+0xcf/0x6c0 [ 1443.288000][T23002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1443.288016][T23002] vfs_read+0x1e4/0xcf0 [ 1443.288031][T23002] ? __pfx___mutex_lock+0x10/0x10 [ 1443.288046][T23002] ? __pfx_vfs_read+0x10/0x10 [ 1443.288063][T23002] ? __fget_files+0x20e/0x3c0 [ 1443.288081][T23002] ksys_read+0x12a/0x250 [ 1443.288094][T23002] ? __pfx_ksys_read+0x10/0x10 [ 1443.288116][T23002] do_syscall_64+0xcd/0xfa0 [ 1443.288131][T23002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.288142][T23002] RIP: 0033:0x7f790338d8dc [ 1443.288152][T23002] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1443.288163][T23002] RSP: 002b:00007f79015d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1443.288174][T23002] RAX: ffffffffffffffda RBX: 00007f79035e6180 RCX: 00007f790338d8dc [ 1443.288181][T23002] RDX: 000000000000000f RSI: 00007f79015d50a0 RDI: 0000000000000007 [ 1443.288188][T23002] RBP: 00007f79015d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.288194][T23002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1443.288201][T23002] R13: 00007f79035e6218 R14: 00007f79035e6180 R15: 00007ffcf4494608 [ 1443.288216][T23002] [ 1446.585306][T23027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1446.592781][T23027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.785479][T23027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1446.793445][T23027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.120391][T23038] FAULT_INJECTION: forcing a failure. [ 1447.120391][T23038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1447.134633][T23038] CPU: 1 UID: 0 PID: 23038 Comm: syz.6.4351 Not tainted syzkaller #0 PREEMPT(full) [ 1447.134659][T23038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1447.134670][T23038] Call Trace: [ 1447.134677][T23038] [ 1447.134685][T23038] dump_stack_lvl+0x16c/0x1f0 [ 1447.134711][T23038] should_fail_ex+0x512/0x640 [ 1447.134737][T23038] should_fail_alloc_page+0xe7/0x130 [ 1447.134765][T23038] prepare_alloc_pages+0x3c2/0x610 [ 1447.134791][T23038] ? find_held_lock+0x2b/0x80 [ 1447.134811][T23038] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1447.134836][T23038] ? lockdep_hardirqs_on+0x7c/0x110 [ 1447.134857][T23038] ? finish_task_switch.isra.0+0x221/0xc10 [ 1447.134888][T23038] ? rcu_is_watching+0x12/0xc0 [ 1447.134905][T23038] ? trace_sched_exit_tp+0xd1/0x120 [ 1447.134930][T23038] ? __schedule+0x11a3/0x5de0 [ 1447.134953][T23038] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1447.134974][T23038] ? do_raw_spin_lock+0x12c/0x2b0 [ 1447.135002][T23038] ? find_held_lock+0x2b/0x80 [ 1447.135030][T23038] ? __pfx___schedule+0x10/0x10 [ 1447.135052][T23038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1447.135082][T23038] ? policy_nodemask+0xea/0x4e0 [ 1447.135112][T23038] alloc_pages_mpol+0x1fb/0x550 [ 1447.135138][T23038] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1447.135166][T23038] ? preempt_schedule_thunk+0x16/0x30 [ 1447.135193][T23038] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1447.135212][T23038] shmem_alloc_folio+0x135/0x160 [ 1447.135242][T23038] shmem_alloc_and_add_folio+0x499/0xc20 [ 1447.135269][T23038] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1447.135291][T23038] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1447.135319][T23038] shmem_get_folio_gfp+0x67f/0x1610 [ 1447.135345][T23038] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1447.135365][T23038] ? __pfx_noop_dirty_folio+0x10/0x10 [ 1447.135388][T23038] ? __pfx___might_resched+0x10/0x10 [ 1447.135409][T23038] shmem_fallocate+0x794/0xf50 [ 1447.135442][T23038] ? __pfx_shmem_fallocate+0x10/0x10 [ 1447.135472][T23038] ? __lock_acquire+0xb8a/0x1c90 [ 1447.135497][T23038] ? __lock_acquire+0x622/0x1c90 [ 1447.135568][T23038] ? __pfx_shmem_fallocate+0x10/0x10 [ 1447.135590][T23038] vfs_fallocate+0x5b4/0x10e0 [ 1447.135615][T23038] ? __pfx_vfs_fallocate+0x10/0x10 [ 1447.135640][T23038] ? fdget+0x1a9/0x210 [ 1447.135666][T23038] __x64_sys_fallocate+0xd5/0x150 [ 1447.135692][T23038] do_syscall_64+0xcd/0xfa0 [ 1447.135715][T23038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.135732][T23038] RIP: 0033:0x7f4f2bf8eec9 [ 1447.135747][T23038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1447.135764][T23038] RSP: 002b:00007f4f2cea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 1447.135781][T23038] RAX: ffffffffffffffda RBX: 00007f4f2c1e6180 RCX: 00007f4f2bf8eec9 [ 1447.135793][T23038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1447.135803][T23038] RBP: 00007f4f2cea9090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.135814][T23038] R10: 000000000010fff9 R11: 0000000000000246 R12: 0000000000000002 [ 1447.135824][T23038] R13: 00007f4f2c1e6218 R14: 00007f4f2c1e6180 R15: 00007ffe12a7e3a8 [ 1447.135851][T23038] [ 1448.488844][T23055] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23055 comm=syz.4.4355 [ 1448.511600][T23055] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23055 comm=syz.4.4355 [ 1451.277703][T23103] netlink: 'syz.8.4369': attribute type 13 has an invalid length. [ 1451.285954][T23103] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4369'. [ 1451.336927][ T30] audit: type=1400 audit(2000000487.880:1603): avc: denied { map } for pid=23100 comm="syz.0.4368" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1451.360080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1451.521004][T23112] input: syz1 as /devices/virtual/input/input100 [ 1453.119155][T13814] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1455.465245][T23145] FAULT_INJECTION: forcing a failure. [ 1455.465245][T23145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.600676][T23145] CPU: 0 UID: 0 PID: 23145 Comm: syz.9.4382 Not tainted syzkaller #0 PREEMPT(full) [ 1455.600711][T23145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1455.600722][T23145] Call Trace: [ 1455.600728][T23145] [ 1455.600736][T23145] dump_stack_lvl+0x16c/0x1f0 [ 1455.600763][T23145] should_fail_ex+0x512/0x640 [ 1455.600789][T23145] _copy_from_user+0x2e/0xd0 [ 1455.600814][T23145] copy_msghdr_from_user+0x98/0x160 [ 1455.600837][T23145] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1455.600863][T23145] ? kfree+0x252/0x6d0 [ 1455.600879][T23145] ? find_held_lock+0x2b/0x80 [ 1455.600902][T23145] ___sys_recvmsg+0xdb/0x1a0 [ 1455.600923][T23145] ? __pfx____sys_recvmsg+0x10/0x10 [ 1455.600959][T23145] ? __pfx___might_resched+0x10/0x10 [ 1455.600984][T23145] do_recvmmsg+0x2fe/0x750 [ 1455.601009][T23145] ? __pfx_do_recvmmsg+0x10/0x10 [ 1455.601029][T23145] ? vfs_write+0x15d/0x11d0 [ 1455.601057][T23145] ? __pfx_vfs_write+0x10/0x10 [ 1455.601096][T23145] __x64_sys_recvmmsg+0x22a/0x280 [ 1455.601121][T23145] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1455.601152][T23145] do_syscall_64+0xcd/0xfa0 [ 1455.601176][T23145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.601194][T23145] RIP: 0033:0x7f790338eec9 [ 1455.601209][T23145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1455.601226][T23145] RSP: 002b:00007f7904147038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1455.601244][T23145] RAX: ffffffffffffffda RBX: 00007f79035e5fa0 RCX: 00007f790338eec9 [ 1455.601256][T23145] RDX: 0000000000001800 RSI: 0000200000001dc0 RDI: 0000000000000004 [ 1455.601267][T23145] RBP: 00007f7904147090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.601278][T23145] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000002 [ 1455.601288][T23145] R13: 00007f79035e6038 R14: 00007f79035e5fa0 R15: 00007ffcf4494608 [ 1455.601315][T23145] [ 1457.423506][T23161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23161 comm=syz.8.4386 [ 1458.072210][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4389'. [ 1458.081571][T23174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4389'. [ 1459.286218][T23154] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1459.302961][T16540] Bluetooth: hci2: command 0x0c1a tx timeout [ 1459.507670][T23154] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1459.513733][T23154] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1459.519710][T23154] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1459.530285][T23154] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1459.537067][T23154] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1459.543002][T23154] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1459.549935][T23154] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1459.555860][T23154] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1459.563052][T23153] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1459.574555][T23153] delete_channel: no stack [ 1460.417574][T17607] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1460.623987][T23206] FAULT_INJECTION: forcing a failure. [ 1460.623987][T23206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.637202][T23206] CPU: 0 UID: 0 PID: 23206 Comm: syz.8.4396 Not tainted syzkaller #0 PREEMPT(full) [ 1460.637227][T23206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1460.637237][T23206] Call Trace: [ 1460.637244][T23206] [ 1460.637251][T23206] dump_stack_lvl+0x16c/0x1f0 [ 1460.637279][T23206] should_fail_ex+0x512/0x640 [ 1460.637305][T23206] _copy_to_user+0x32/0xd0 [ 1460.637330][T23206] simple_read_from_buffer+0xcb/0x170 [ 1460.637356][T23206] proc_fail_nth_read+0x197/0x240 [ 1460.637383][T23206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1460.637411][T23206] ? rw_verify_area+0xcf/0x6c0 [ 1460.637431][T23206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1460.637456][T23206] vfs_read+0x1e4/0xcf0 [ 1460.637488][T23206] ? __pfx___mutex_lock+0x10/0x10 [ 1460.637511][T23206] ? __pfx_vfs_read+0x10/0x10 [ 1460.637541][T23206] ? __fget_files+0x20e/0x3c0 [ 1460.637562][T23206] ? rcu_watching_snap_stopped_since+0xe0/0x110 [ 1460.637590][T23206] ksys_read+0x12a/0x250 [ 1460.637612][T23206] ? __pfx_ksys_read+0x10/0x10 [ 1460.637642][T23206] do_syscall_64+0xcd/0xfa0 [ 1460.637665][T23206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.637683][T23206] RIP: 0033:0x7f0e2038d8dc [ 1460.637698][T23206] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1460.637715][T23206] RSP: 002b:00007f0e21149030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1460.637733][T23206] RAX: ffffffffffffffda RBX: 00007f0e205e6180 RCX: 00007f0e2038d8dc [ 1460.637745][T23206] RDX: 000000000000000f RSI: 00007f0e211490a0 RDI: 0000000000000008 [ 1460.637756][T23206] RBP: 00007f0e21149090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.637767][T23206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.637778][T23206] R13: 00007f0e205e6218 R14: 00007f0e205e6180 R15: 00007ffc07e69cf8 [ 1460.637806][T23206] [ 1461.419542][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 1461.541941][T17607] usb 1-1: device descriptor read/64, error -71 [ 1461.647393][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 1461.686333][T16540] Bluetooth: hci4: command 0x0406 tx timeout [ 1461.692453][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 1461.806301][T17607] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1462.523200][T23228] Mount JFS Failure: -5 [ 1462.639442][T23228] jfs_mount failed w/return code = -5 [ 1462.807023][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4403'. [ 1462.816049][T23235] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4403'. [ 1463.692247][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 1463.743074][T23251] Invalid ELF section header size [ 1463.764017][ T30] audit: type=1400 audit(2000000500.290:1604): avc: denied { module_load } for pid=23248 comm="syz.6.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1463.791339][T20742] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.792733][T23253] netlink: 728 bytes leftover after parsing attributes in process `syz.4.4409'. [ 1463.803977][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 1463.811112][T20442] Bluetooth: hci4: command 0x0406 tx timeout [ 1463.825767][T20682] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1464.109428][T20682] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1464.140547][T20682] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1464.456014][ T5963] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1464.506718][T23274] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4414'. [ 1464.616157][ T30] audit: type=1400 audit(2000000501.111:1605): avc: denied { create } for pid=23267 comm="syz.4.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1464.666027][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 1464.785962][ T5963] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1464.836174][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.905053][ T5963] usb 1-1: config 0 descriptor?? [ 1465.156357][ T5896] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1465.212652][ T5963] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1465.248955][ T5963] usb 1-1: USB disconnect, device number 19 [ 1465.281976][T23289] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4419'. [ 1465.315944][ T5896] usb 7-1: Using ep0 maxpacket: 16 [ 1465.344266][ T5896] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1465.372222][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.380558][ T5896] usb 7-1: Product: syz [ 1465.384765][ T5896] usb 7-1: Manufacturer: syz [ 1465.389585][ T5896] usb 7-1: SerialNumber: syz [ 1465.410932][ T5896] usb 7-1: config 0 descriptor?? [ 1465.737927][T23298] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1465.831741][T20442] Bluetooth: hci3: command 0x0406 tx timeout [ 1466.130910][ T5896] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1466.142232][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1466.153761][ T5896] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1466.162113][ T5896] usb 7-1: media controller created [ 1466.192607][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1467.190363][ T5896] zl10353_read_register: readreg error (reg=127, ret==0) [ 1467.200899][ T5896] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1467.210614][ T5896] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1467.421074][T23319] ceph: No mds server is up or the cluster is laggy [ 1467.428209][T13814] libceph: connect (1)[c::]:6789 error -101 [ 1467.434293][T13814] libceph: mon0 (1)[c::]:6789 connect error [ 1467.678215][T23334] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4432'. [ 1467.852954][T23338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4433'. [ 1468.117614][T13814] usb 7-1: USB disconnect, device number 110 [ 1468.134335][T13814] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1468.578675][T23346] FAULT_INJECTION: forcing a failure. [ 1468.578675][T23346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1468.605475][T23346] CPU: 0 UID: 0 PID: 23346 Comm: syz.4.4435 Not tainted syzkaller #0 PREEMPT(full) [ 1468.605493][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1468.605500][T23346] Call Trace: [ 1468.605505][T23346] [ 1468.605510][T23346] dump_stack_lvl+0x16c/0x1f0 [ 1468.605528][T23346] should_fail_ex+0x512/0x640 [ 1468.605544][T23346] _copy_from_user+0x2e/0xd0 [ 1468.605559][T23346] copy_msghdr_from_user+0x98/0x160 [ 1468.605582][T23346] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1468.605605][T23346] ? kfree+0x252/0x6d0 [ 1468.605622][T23346] ? __lock_acquire+0x622/0x1c90 [ 1468.605645][T23346] ___sys_recvmsg+0xdb/0x1a0 [ 1468.605658][T23346] ? __pfx____sys_recvmsg+0x10/0x10 [ 1468.605684][T23346] ? __pfx___might_resched+0x10/0x10 [ 1468.605698][T23346] do_recvmmsg+0x2fe/0x750 [ 1468.605713][T23346] ? __pfx_do_recvmmsg+0x10/0x10 [ 1468.605729][T23346] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1468.605749][T23346] ? __fget_files+0x20e/0x3c0 [ 1468.605767][T23346] __x64_sys_recvmmsg+0x22a/0x280 [ 1468.605782][T23346] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1468.605800][T23346] do_syscall_64+0xcd/0xfa0 [ 1468.605815][T23346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.605827][T23346] RIP: 0033:0x7f93b4b8eec9 [ 1468.605837][T23346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1468.605848][T23346] RSP: 002b:00007f93b5a2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1468.605859][T23346] RAX: ffffffffffffffda RBX: 00007f93b4de6090 RCX: 00007f93b4b8eec9 [ 1468.605866][T23346] RDX: 0400000000000300 RSI: 00002000000031c0 RDI: 0000000000000003 [ 1468.605873][T23346] RBP: 00007f93b5a2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.605879][T23346] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 1468.605885][T23346] R13: 00007f93b4de6128 R14: 00007f93b4de6090 R15: 00007ffe96110b08 [ 1468.605900][T23346] [ 1468.850881][T23348] binder: BINDER_SET_CONTEXT_MGR already set [ 1468.857605][T23348] binder: 23347:23348 ioctl 4018620d 200000004a80 returned -16 [ 1468.865748][T23348] binder: 23347:23348 unknown command 0 [ 1468.871312][T23348] binder: 23347:23348 ioctl c0306201 200000004a40 returned -22 [ 1468.878887][T23348] FAULT_INJECTION: forcing a failure. [ 1468.878887][T23348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1468.892142][T23348] CPU: 0 UID: 0 PID: 23348 Comm: syz.9.4438 Not tainted syzkaller #0 PREEMPT(full) [ 1468.892166][T23348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1468.892177][T23348] Call Trace: [ 1468.892185][T23348] [ 1468.892193][T23348] dump_stack_lvl+0x16c/0x1f0 [ 1468.892216][T23348] should_fail_ex+0x512/0x640 [ 1468.892243][T23348] _copy_to_user+0x32/0xd0 [ 1468.892259][T23348] simple_read_from_buffer+0xcb/0x170 [ 1468.892274][T23348] proc_fail_nth_read+0x197/0x240 [ 1468.892292][T23348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1468.892309][T23348] ? rw_verify_area+0xcf/0x6c0 [ 1468.892322][T23348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1468.892338][T23348] vfs_read+0x1e4/0xcf0 [ 1468.892361][T23348] ? __pfx___mutex_lock+0x10/0x10 [ 1468.892376][T23348] ? __pfx_vfs_read+0x10/0x10 [ 1468.892393][T23348] ? __fget_files+0x20e/0x3c0 [ 1468.892411][T23348] ksys_read+0x12a/0x250 [ 1468.892424][T23348] ? __pfx_ksys_read+0x10/0x10 [ 1468.892442][T23348] do_syscall_64+0xcd/0xfa0 [ 1468.892456][T23348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.892468][T23348] RIP: 0033:0x7f790338d8dc [ 1468.892478][T23348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1468.892489][T23348] RSP: 002b:00007f7904147030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1468.892500][T23348] RAX: ffffffffffffffda RBX: 00007f79035e5fa0 RCX: 00007f790338d8dc [ 1468.892507][T23348] RDX: 000000000000000f RSI: 00007f79041470a0 RDI: 0000000000000006 [ 1468.892514][T23348] RBP: 00007f7904147090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.892520][T23348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.892526][T23348] R13: 00007f79035e6038 R14: 00007f79035e5fa0 R15: 00007ffcf4494608 [ 1468.892541][T23348] [ 1469.362522][T23356] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 1469.375675][ T30] audit: type=1400 audit(2000000505.911:1606): avc: denied { relabelfrom } for pid=23349 comm="syz.6.4436" name="UNIX" dev="sockfs" ino=86007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1469.654945][ T30] audit: type=1400 audit(2000000505.951:1607): avc: denied { relabelto } for pid=23349 comm="syz.6.4436" name="UNIX" dev="sockfs" ino=86007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:policy_config_t:s0" [ 1470.139464][T23367] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1470.627453][T23375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4443'. [ 1470.655897][T23375] bond1: left promiscuous mode [ 1470.661048][T23375] bridge0: port 3(bond1) entered disabled state [ 1470.766428][T23375] bridge_slave_1: left allmulticast mode [ 1470.772341][T23375] bridge_slave_1: left promiscuous mode [ 1470.778237][T23375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.818233][T23375] bridge_slave_0: left allmulticast mode [ 1470.823909][T23375] bridge_slave_0: left promiscuous mode [ 1470.870435][T23375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.997204][T23381] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1471.007903][T23381] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1472.355743][T17607] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1472.575459][T17607] usb 1-1: Using ep0 maxpacket: 8 [ 1472.584160][T17607] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1472.595488][T17607] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1472.766108][T17607] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1472.824120][T17607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.835720][T17607] usb 1-1: Product: syz [ 1472.840644][T17607] usb 1-1: Manufacturer: syz [ 1472.856086][T17607] usb 1-1: SerialNumber: syz [ 1472.892449][T23396] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1473.271125][T23388] syz.6.4444: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1473.290030][T23388] CPU: 1 UID: 0 PID: 23388 Comm: syz.6.4444 Not tainted syzkaller #0 PREEMPT(full) [ 1473.290057][T23388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1473.290068][T23388] Call Trace: [ 1473.290074][T23388] [ 1473.290081][T23388] dump_stack_lvl+0x16c/0x1f0 [ 1473.290109][T23388] warn_alloc+0x248/0x3a0 [ 1473.290132][T23388] ? __pfx_warn_alloc+0x10/0x10 [ 1473.290161][T23388] ? packet_set_ring+0xb4c/0x17e0 [ 1473.290182][T23388] ? __vmalloc_node_noprof+0xad/0xf0 [ 1473.290203][T23388] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 1473.290229][T23388] ? packet_set_ring+0xb4c/0x17e0 [ 1473.290261][T23388] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1473.290288][T23388] ? alloc_pages_mpol+0x25a/0x550 [ 1473.290314][T23388] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1473.290333][T23388] ? packet_set_ring+0xb4c/0x17e0 [ 1473.290407][T23388] __vmalloc_node_noprof+0xad/0xf0 [ 1473.290433][T23388] ? packet_set_ring+0xb4c/0x17e0 [ 1473.290500][T23388] packet_set_ring+0xb4c/0x17e0 [ 1473.290528][T23388] packet_setsockopt+0x121b/0x33c0 [ 1473.290551][T23388] ? sock_has_perm+0x259/0x2f0 [ 1473.290573][T23388] ? __pfx_packet_setsockopt+0x10/0x10 [ 1473.290590][T23388] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 1473.290615][T23388] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1473.290642][T23388] ? find_held_lock+0x2b/0x80 [ 1473.290656][T23388] ? selinux_socket_setsockopt+0x6a/0x80 [ 1473.290670][T23388] ? __pfx_packet_setsockopt+0x10/0x10 [ 1473.290683][T23388] do_sock_setsockopt+0xf3/0x1d0 [ 1473.290710][T23388] __sys_setsockopt+0x1a0/0x230 [ 1473.290734][T23388] __x64_sys_setsockopt+0xbd/0x160 [ 1473.290751][T23388] ? do_syscall_64+0x91/0xfa0 [ 1473.290771][T23388] ? lockdep_hardirqs_on+0x7c/0x110 [ 1473.290786][T23388] do_syscall_64+0xcd/0xfa0 [ 1473.290800][T23388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.290812][T23388] RIP: 0033:0x7f4f2bf8eec9 [ 1473.290823][T23388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1473.290835][T23388] RSP: 002b:00007f4f2ce88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1473.290852][T23388] RAX: ffffffffffffffda RBX: 00007f4f2c1e6270 RCX: 00007f4f2bf8eec9 [ 1473.290864][T23388] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000006 [ 1473.290874][T23388] RBP: 00007f4f2c011f91 R08: 000000000000001c R09: 0000000000000000 [ 1473.290885][T23388] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1473.290895][T23388] R13: 00007f4f2c1e6308 R14: 00007f4f2c1e6270 R15: 00007ffe12a7e3a8 [ 1473.290923][T23388] [ 1473.290928][T23388] Mem-Info: [ 1473.555753][T22633] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1473.623462][T23388] active_anon:28029 inactive_anon:0 isolated_anon:0 [ 1473.623462][T23388] active_file:1811 inactive_file:3403 isolated_file:0 [ 1473.623462][T23388] unevictable:768 dirty:189 writeback:0 [ 1473.623462][T23388] slab_reclaimable:8887 slab_unreclaimable:122703 [ 1473.623462][T23388] mapped:32567 shmem:25247 pagetables:1071 [ 1473.623462][T23388] sec_pagetables:0 bounce:0 [ 1473.623462][T23388] kernel_misc_reclaimable:0 [ 1473.623462][T23388] free:1269613 free_pcp:25249 free_cma:0 [ 1473.668783][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.683780][T17607] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 1473.697315][T17607] usb 1-1: USB disconnect, device number 20 [ 1473.703495][T23388] Node 0 active_anon:112116kB inactive_anon:0kB active_file:7244kB inactive_file:13480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130268kB dirty:456kB writeback:0kB shmem:99452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15596kB pagetables:4100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1473.741288][T17607] usblp0: removed [ 1473.757033][T22633] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1473.768920][T22633] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1473.847072][T22633] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1473.859080][T23388] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1473.869164][T22633] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.899232][T23388] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1473.908446][T23407] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1473.936397][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.401458][T22633] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1474.421944][T23388] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 1474.443720][T23388] Node 0 DMA32 free:1200132kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:123708kB inactive_anon:0kB active_file:7244kB inactive_file:13480kB unevictable:1536kB writepending:428kB zspages:0kB present:3129332kB managed:2541344kB mlocked:0kB bounce:0kB free_pcp:60160kB local_pcp:26772kB free_cma:0kB [ 1474.489080][T23388] lowmem_reserve[]: 0 0 1 1 1 [ 1474.500182][T23388] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.503082][ T5896] usb 10-1: USB disconnect, device number 40 [ 1474.529773][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.690212][T23388] lowmem_reserve[]: 0 0 0 0 0 [ 1474.695027][T23388] Node 1 Normal free:3862756kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:28480kB local_pcp:15848kB free_cma:0kB [ 1474.722507][T23419] FAULT_INJECTION: forcing a failure. [ 1474.722507][T23419] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.727306][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.755810][T23419] CPU: 0 UID: 0 PID: 23419 Comm: syz.0.4454 Not tainted syzkaller #0 PREEMPT(full) [ 1474.755837][T23419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1474.755846][T23419] Call Trace: [ 1474.755853][T23419] [ 1474.755860][T23419] dump_stack_lvl+0x16c/0x1f0 [ 1474.755888][T23419] should_fail_ex+0x512/0x640 [ 1474.755907][T23419] ? fs_reclaim_acquire+0xae/0x150 [ 1474.755933][T23419] should_failslab+0xc2/0x120 [ 1474.755959][T23419] __kmalloc_noprof+0xdd/0x880 [ 1474.755976][T23419] ? __pfx_prepend_path+0x10/0x10 [ 1474.755994][T23419] ? ima_alloc_init_template+0x19d/0x720 [ 1474.756026][T23419] ? ima_alloc_init_template+0x19d/0x720 [ 1474.756051][T23419] ima_alloc_init_template+0x19d/0x720 [ 1474.756079][T23419] ? __pfx_d_absolute_path+0x10/0x10 [ 1474.756100][T23419] ima_store_measurement+0x1eb/0x5c0 [ 1474.756130][T23419] ? __pfx_ima_store_measurement+0x10/0x10 [ 1474.756158][T23419] ? vfs_getxattr_alloc+0xec/0x350 [ 1474.756188][T23419] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1474.756212][T23419] process_measurement+0x1ddb/0x23e0 [ 1474.756257][T23419] ? __pfx_process_measurement+0x10/0x10 [ 1474.756293][T23419] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1474.756309][T23419] ? inode_to_bdi+0x9e/0x160 [ 1474.756325][T23419] ima_file_check+0xbc/0x100 [ 1474.756344][T23419] ? __pfx_ima_file_check+0x10/0x10 [ 1474.756367][T23419] security_file_post_open+0x8e/0x210 [ 1474.756383][T23419] path_openat+0x1404/0x2cb0 [ 1474.756402][T23419] ? __pfx_path_openat+0x10/0x10 [ 1474.756418][T23419] ? __lock_acquire+0xb8a/0x1c90 [ 1474.756434][T23419] do_filp_open+0x20b/0x470 [ 1474.756449][T23419] ? __pfx_do_filp_open+0x10/0x10 [ 1474.756474][T23419] ? alloc_fd+0x471/0x7d0 [ 1474.756493][T23419] do_sys_openat2+0x11b/0x1d0 [ 1474.756504][T23419] ? __pfx_do_sys_openat2+0x10/0x10 [ 1474.756516][T23419] ? __fget_files+0x20e/0x3c0 [ 1474.756533][T23419] __x64_sys_openat+0x174/0x210 [ 1474.756544][T23419] ? __pfx___x64_sys_openat+0x10/0x10 [ 1474.756554][T23419] ? ksys_write+0x1ac/0x250 [ 1474.756573][T23419] do_syscall_64+0xcd/0xfa0 [ 1474.756588][T23419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.756601][T23419] RIP: 0033:0x7f412818eec9 [ 1474.756612][T23419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1474.756623][T23419] RSP: 002b:00007f412910b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1474.756634][T23419] RAX: ffffffffffffffda RBX: 00007f41283e5fa0 RCX: 00007f412818eec9 [ 1474.756641][T23419] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1474.756648][T23419] RBP: 00007f412910b090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.756654][T23419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1474.756660][T23419] R13: 00007f41283e6038 R14: 00007f41283e5fa0 R15: 00007ffe699758b8 [ 1474.756676][T23419] [ 1475.034946][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.042348][T23388] lowmem_reserve[]: 0 0 0 0 0 [ 1475.065367][ T30] audit: type=1804 audit(2000000511.601:1608): pid=23419 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=add_template_measure cause=ENOMEM comm="syz.0.4454" name="/newroot/337/bus/file1" dev="overlay" ino=1824 res=0 errno=0 [ 1475.094514][T23388] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1475.126947][T23388] Node 0 DMA32: 1788*4kB (UME) 1098*8kB (UME) 285*16kB (ME) 116*32kB (ME) 424*64kB (UME) 371*128kB (UME) 593*256kB (UME) 305*512kB (UME) 160*1024kB (UME) 31*2048kB (UME) 138*4096kB (UM) = 1199376kB [ 1475.262037][T23388] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1475.279381][T23388] Node 1 Normal: 3*4kB (UME) 7*8kB (UME) 8*16kB (ME) 9*32kB (UME) 6*64kB (UME) 3*128kB (ME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 941*4096kB (M) = 3862756kB [ 1475.297612][T23388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1475.809263][T23388] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=1 hugepages_size=2048kB [ 1475.819088][T23388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1475.872735][T23388] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1475.904769][T23388] 33313 total pagecache pages [ 1475.943543][T23388] 0 pages in swap cache [ 1475.949216][T23388] Free swap = 124996kB [ 1475.953485][T23388] Total swap = 124996kB [ 1475.962924][T23388] 2097051 pages RAM [ 1475.967852][T23388] 0 pages HighMem/MovableOnly [ 1475.976748][T23388] 429689 pages reserved [ 1476.056314][T23440] No control pipe specified [ 1476.101515][T23388] 0 pages cma reserved [ 1476.941991][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4462'. [ 1477.839080][ T30] audit: type=1326 audit(2000000514.391:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.4.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93b4b85d67 code=0x7ffc0000 [ 1477.893894][ T30] audit: type=1326 audit(2000000514.391:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.4.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93b4b2af79 code=0x7ffc0000 [ 1477.938255][ T30] audit: type=1326 audit(2000000514.391:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.4.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93b4b85d67 code=0x7ffc0000 [ 1477.998524][ T30] audit: type=1326 audit(2000000514.391:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.4.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93b4b2af79 code=0x7ffc0000 [ 1478.056893][ T30] audit: type=1326 audit(2000000514.391:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.4.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b4b8eec9 code=0x7ffc0000 [ 1478.216900][ T30] audit: type=1326 audit(2000000514.391:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.4.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b4b8eec9 code=0x7ffc0000 [ 1478.485231][ T30] audit: type=1326 audit(2000000514.631:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.4.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f93b4b8eec9 code=0x7ffc0000 [ 1478.510418][ T30] audit: type=1326 audit(2000000514.631:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.4.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b4b8eec9 code=0x7ffc0000 [ 1478.648986][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4467'. [ 1478.656187][ T30] audit: type=1326 audit(2000000514.631:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.4.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b4b8eec9 code=0x7ffc0000 [ 1479.382833][T23489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1480.633410][T23500] lo speed is unknown, defaulting to 1000 [ 1480.903223][T23500] lo speed is unknown, defaulting to 1000 [ 1480.955256][T22633] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1481.057479][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1481.057495][ T30] audit: type=1400 audit(2000000517.611:1642): avc: denied { bind } for pid=23511 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1481.097677][ T30] audit: type=1400 audit(2000000517.641:1643): avc: denied { ioctl } for pid=23511 comm="syz.0.4481" path="socket:[87263]" dev="sockfs" ino=87263 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1481.127831][T22633] usb 7-1: config 0 has no interfaces? [ 1481.141321][T22633] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1481.185728][T22633] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.204502][T22633] usb 7-1: Product: syz [ 1481.216029][T22633] usb 7-1: Manufacturer: syz [ 1481.336938][ T30] audit: type=1400 audit(2000000517.641:1644): avc: denied { connect } for pid=23511 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1481.336997][T22633] usb 7-1: SerialNumber: syz [ 1481.361872][ T30] audit: type=1400 audit(2000000517.641:1645): avc: denied { ioctl } for pid=23509 comm="syz.9.4480" path="socket:[86501]" dev="sockfs" ino=86501 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1481.449083][T22633] usb 7-1: config 0 descriptor?? [ 1481.515614][ T30] audit: type=1400 audit(2000000517.771:1646): avc: denied { connect } for pid=23509 comm="syz.9.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1481.753419][ T5963] usb 7-1: USB disconnect, device number 111 [ 1482.333028][T23530] FAULT_INJECTION: forcing a failure. [ 1482.333028][T23530] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.345857][T23530] CPU: 0 UID: 0 PID: 23530 Comm: syz.9.4487 Not tainted syzkaller #0 PREEMPT(full) [ 1482.345873][T23530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1482.345880][T23530] Call Trace: [ 1482.345884][T23530] [ 1482.345888][T23530] dump_stack_lvl+0x16c/0x1f0 [ 1482.345906][T23530] should_fail_ex+0x512/0x640 [ 1482.345920][T23530] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1482.345937][T23530] should_failslab+0xc2/0x120 [ 1482.345953][T23530] __kvmalloc_node_noprof+0x141/0x9c0 [ 1482.345968][T23530] ? v4l2_ctrl_new+0x982/0x2190 [ 1482.345985][T23530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1482.346006][T23530] ? v4l2_ctrl_new+0x982/0x2190 [ 1482.346022][T23530] v4l2_ctrl_new+0x982/0x2190 [ 1482.346043][T23530] ? kasan_save_track+0x14/0x30 [ 1482.346057][T23530] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1482.346073][T23530] ? v4l2_ctrl_new_std+0x1be/0x290 [ 1482.346091][T23530] ? __mutex_trylock_common+0xe9/0x250 [ 1482.346107][T23530] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1482.346121][T23530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1482.346140][T23530] v4l2_ctrl_new_std+0x1be/0x290 [ 1482.346161][T23530] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1482.346182][T23530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1482.346199][T23530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1482.346217][T23530] ? __asan_memcpy+0x3c/0x60 [ 1482.346230][T23530] ? find_ref+0x20b/0x420 [ 1482.346247][T23530] handler_new_ref+0x827/0xc60 [ 1482.346267][T23530] v4l2_ctrl_new+0x196c/0x2190 [ 1482.346289][T23530] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1482.346310][T23530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1482.346329][T23530] v4l2_ctrl_new_std+0x1be/0x290 [ 1482.346351][T23530] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1482.346368][T23530] ? rcu_is_watching+0x12/0xc0 [ 1482.346380][T23530] ? trace_kmalloc+0x2b/0xd0 [ 1482.346400][T23530] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 1482.346415][T23530] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 1482.346435][T23530] ? media_request_object_init+0x100/0x180 [ 1482.346451][T23530] vicodec_open+0x1b2/0xf70 [ 1482.346465][T23530] ? kobject_get_unless_zero+0x156/0x1e0 [ 1482.346483][T23530] v4l2_open+0x1d2/0x5e0 [ 1482.346498][T23530] ? __pfx_v4l2_open+0x10/0x10 [ 1482.346512][T23530] chrdev_open+0x234/0x6a0 [ 1482.346528][T23530] ? __pfx_chrdev_open+0x10/0x10 [ 1482.346544][T23530] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1482.346563][T23530] do_dentry_open+0x982/0x1530 [ 1482.346578][T23530] ? __pfx_chrdev_open+0x10/0x10 [ 1482.346596][T23530] vfs_open+0x82/0x3f0 [ 1482.346615][T23530] path_openat+0x1de4/0x2cb0 [ 1482.346634][T23530] ? __pfx_path_openat+0x10/0x10 [ 1482.346649][T23530] ? __lock_acquire+0xb8a/0x1c90 [ 1482.346665][T23530] do_filp_open+0x20b/0x470 [ 1482.346680][T23530] ? __pfx_do_filp_open+0x10/0x10 [ 1482.346705][T23530] ? alloc_fd+0x471/0x7d0 [ 1482.346724][T23530] do_sys_openat2+0x11b/0x1d0 [ 1482.346734][T23530] ? __pfx_do_sys_openat2+0x10/0x10 [ 1482.346746][T23530] ? __fget_files+0x20e/0x3c0 [ 1482.346762][T23530] __x64_sys_openat+0x174/0x210 [ 1482.346773][T23530] ? __pfx___x64_sys_openat+0x10/0x10 [ 1482.346783][T23530] ? ksys_write+0x1ac/0x250 [ 1482.346801][T23530] do_syscall_64+0xcd/0xfa0 [ 1482.346815][T23530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.346826][T23530] RIP: 0033:0x7f790338d710 [ 1482.346835][T23530] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1482.346846][T23530] RSP: 002b:00007f7904146b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1482.346858][T23530] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f790338d710 [ 1482.346865][T23530] RDX: 0000000000000002 RSI: 00007f7904146c10 RDI: 00000000ffffff9c [ 1482.346872][T23530] RBP: 00007f7904146c10 R08: 0000000000000000 R09: 00236f656469762f [ 1482.346878][T23530] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1482.346885][T23530] R13: 00007f79035e6038 R14: 00007f79035e5fa0 R15: 00007ffcf4494608 [ 1482.346900][T23530] [ 1483.629580][ T30] audit: type=1400 audit(2000000520.182:1647): avc: denied { map } for pid=23546 comm="syz.6.4493" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1483.662274][T23547] ================================================================== [ 1483.670344][T23547] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 1483.677785][T23547] Read of size 8 at addr ffff88807b48d288 by task syz.6.4493/23547 [ 1483.685653][T23547] [ 1483.687959][T23547] CPU: 0 UID: 0 PID: 23547 Comm: syz.6.4493 Not tainted syzkaller #0 PREEMPT(full) [ 1483.687978][T23547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1483.687988][T23547] Call Trace: [ 1483.687993][T23547] [ 1483.687999][T23547] dump_stack_lvl+0x116/0x1f0 [ 1483.688020][T23547] print_report+0xcd/0x630 [ 1483.688041][T23547] ? __virt_addr_valid+0x81/0x610 [ 1483.688056][T23547] ? __phys_addr+0xe8/0x180 [ 1483.688070][T23547] ? __cpa_addr+0x1d3/0x220 [ 1483.688087][T23547] kasan_report+0xe0/0x110 [ 1483.688107][T23547] ? __cpa_addr+0x1d3/0x220 [ 1483.688127][T23547] __cpa_addr+0x1d3/0x220 [ 1483.688145][T23547] cpa_flush+0x28b/0x8a0 [ 1483.688165][T23547] ? __pfx_cpa_flush+0x10/0x10 [ 1483.688184][T23547] ? pgprot2cachemode+0x9a/0x130 [ 1483.688198][T23547] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1483.688212][T23547] ? drm_gem_get_pages+0x6a0/0xa10 [ 1483.688236][T23547] change_page_attr_set_clr+0x34e/0x4a0 [ 1483.688257][T23547] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1483.688286][T23547] _set_pages_array+0x1ab/0x2c0 [ 1483.688308][T23547] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1483.688327][T23547] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1483.688346][T23547] ? __pfx___might_resched+0x10/0x10 [ 1483.688363][T23547] drm_gem_shmem_mmap+0xc9/0x550 [ 1483.688380][T23547] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 1483.688405][T23547] drm_gem_mmap_obj+0x1b5/0x560 [ 1483.688426][T23547] drm_gem_mmap+0x40b/0x620 [ 1483.688446][T23547] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1483.688466][T23547] ? vm_area_alloc+0x1f/0x160 [ 1483.688481][T23547] ? lockdep_init_map_type+0x5c/0x280 [ 1483.688501][T23547] __mmap_region+0x1309/0x27a0 [ 1483.688518][T23547] ? __pfx___mmap_region+0x10/0x10 [ 1483.688535][T23547] ? lock_acquire+0x179/0x350 [ 1483.688551][T23547] ? find_held_lock+0x2b/0x80 [ 1483.688569][T23547] ? rcu_is_watching+0x12/0xc0 [ 1483.688605][T23547] mmap_region+0x1ab/0x3f0 [ 1483.688620][T23547] ? __get_unmapped_area+0x267/0x440 [ 1483.688643][T23547] do_mmap+0xa3e/0x1210 [ 1483.688664][T23547] ? __pfx_do_mmap+0x10/0x10 [ 1483.688684][T23547] ? __pfx_down_write_killable+0x10/0x10 [ 1483.688706][T23547] vm_mmap_pgoff+0x29e/0x470 [ 1483.688728][T23547] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1483.688749][T23547] ? __fget_files+0x20e/0x3c0 [ 1483.688770][T23547] ksys_mmap_pgoff+0x32c/0x5c0 [ 1483.688791][T23547] __x64_sys_mmap+0x125/0x190 [ 1483.688810][T23547] do_syscall_64+0xcd/0xfa0 [ 1483.688827][T23547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.688842][T23547] RIP: 0033:0x7f4f2bf8eec9 [ 1483.688854][T23547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.688869][T23547] RSP: 002b:00007f4f2ceeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1483.688883][T23547] RAX: ffffffffffffffda RBX: 00007f4f2c1e5fa0 RCX: 00007f4f2bf8eec9 [ 1483.688893][T23547] RDX: 000000000100000d RSI: 0000000000004000 RDI: 0000200000001000 [ 1483.688902][T23547] RBP: 00007f4f2c011f91 R08: 0000000000000004 R09: 0000000100000000 [ 1483.688911][T23547] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1483.688919][T23547] R13: 00007f4f2c1e6038 R14: 00007f4f2c1e5fa0 R15: 00007ffe12a7e3a8 [ 1483.688935][T23547] [ 1483.688939][T23547] [ 1484.003524][T23547] Allocated by task 23547: [ 1484.007918][T23547] kasan_save_stack+0x33/0x60 [ 1484.012584][T23547] kasan_save_track+0x14/0x30 [ 1484.017241][T23547] __kasan_kmalloc+0xaa/0xb0 [ 1484.021809][T23547] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1484.027161][T23547] drm_gem_get_pages+0x144/0xa10 [ 1484.032084][T23547] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 1484.038130][T23547] drm_gem_shmem_mmap+0xc9/0x550 [ 1484.043048][T23547] drm_gem_mmap_obj+0x1b5/0x560 [ 1484.047878][T23547] drm_gem_mmap+0x40b/0x620 [ 1484.052366][T23547] __mmap_region+0x1309/0x27a0 [ 1484.057108][T23547] mmap_region+0x1ab/0x3f0 [ 1484.061519][T23547] do_mmap+0xa3e/0x1210 [ 1484.065663][T23547] vm_mmap_pgoff+0x29e/0x470 [ 1484.070242][T23547] ksys_mmap_pgoff+0x32c/0x5c0 [ 1484.074996][T23547] __x64_sys_mmap+0x125/0x190 [ 1484.079674][T23547] do_syscall_64+0xcd/0xfa0 [ 1484.084161][T23547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.090043][T23547] [ 1484.092348][T23547] The buggy address belongs to the object at ffff88807b48d200 [ 1484.092348][T23547] which belongs to the cache kmalloc-192 of size 192 [ 1484.106379][T23547] The buggy address is located 0 bytes to the right of [ 1484.106379][T23547] allocated 136-byte region [ffff88807b48d200, ffff88807b48d288) [ 1484.120847][T23547] [ 1484.123149][T23547] The buggy address belongs to the physical page: [ 1484.129533][T23547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b48d [ 1484.138287][T23547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1484.145387][T23547] page_type: f5(slab) [ 1484.149354][T23547] raw: 00fff00000000000 ffff88813ff263c0 ffffea000100d680 dead000000000004 [ 1484.157932][T23547] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1484.166490][T23547] page dumped because: kasan: bad access detected [ 1484.172875][T23547] page_owner tracks the page as allocated [ 1484.178566][T23547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9810, tgid 9808 (syz.0.924), ts 413730946422, free_ts 387195652281 [ 1484.197734][T23547] post_alloc_hook+0x1c0/0x230 [ 1484.202489][T23547] get_page_from_freelist+0x10a3/0x3a30 [ 1484.208014][T23547] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1484.213884][T23547] alloc_pages_mpol+0x1fb/0x550 [ 1484.218717][T23547] new_slab+0x24a/0x360 [ 1484.222848][T23547] ___slab_alloc+0xdc4/0x1ae0 [ 1484.227500][T23547] __slab_alloc.constprop.0+0x63/0x110 [ 1484.232969][T23547] __kmalloc_noprof+0x501/0x880 [ 1484.237845][T23547] hash_ipportnet6_resize+0x1166/0x1e70 [ 1484.243376][T23547] call_ad.constprop.0+0x36d/0x940 [ 1484.248486][T23547] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 1484.254359][T23547] nfnetlink_rcv_msg+0x9fc/0x1200 [ 1484.259361][T23547] netlink_rcv_skb+0x158/0x420 [ 1484.264122][T23547] nfnetlink_rcv+0x1b3/0x430 [ 1484.268688][T23547] netlink_unicast+0x5aa/0x870 [ 1484.273430][T23547] netlink_sendmsg+0x8c8/0xdd0 [ 1484.278175][T23547] page last free pid 9480 tgid 9477 stack trace: [ 1484.284472][T23547] __free_frozen_pages+0x7df/0x1160 [ 1484.289645][T23547] kimage_free+0x23c/0x590 [ 1484.294038][T23547] do_kexec_load+0x5c5/0x8a0 [ 1484.298604][T23547] __x64_sys_kexec_load+0x1bf/0x230 [ 1484.303780][T23547] do_syscall_64+0xcd/0xfa0 [ 1484.308264][T23547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.314136][T23547] [ 1484.316438][T23547] Memory state around the buggy address: [ 1484.322051][T23547] ffff88807b48d180: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc [ 1484.330095][T23547] ffff88807b48d200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1484.338306][T23547] >ffff88807b48d280: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1484.346340][T23547] ^ [ 1484.350641][T23547] ffff88807b48d300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1484.358677][T23547] ffff88807b48d380: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc [ 1484.366711][T23547] ================================================================== [ 1484.374796][ T5963] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1484.394462][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.405014][ T30] audit: type=1400 audit(2000000520.182:1648): avc: denied { execute } for pid=23546 comm="syz.6.4493" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1484.441356][T23547] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1484.448585][T23547] CPU: 1 UID: 0 PID: 23547 Comm: syz.6.4493 Not tainted syzkaller #0 PREEMPT(full) [ 1484.457952][T23547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1484.468006][T23547] Call Trace: [ 1484.471282][T23547] [ 1484.474202][T23547] dump_stack_lvl+0x3d/0x1f0 [ 1484.478781][T23547] vpanic+0x640/0x6f0 [ 1484.482748][T23547] panic+0xca/0xd0 [ 1484.486463][T23547] ? __pfx_panic+0x10/0x10 [ 1484.490860][T23547] ? __cpa_addr+0x1d3/0x220 [ 1484.495350][T23547] ? preempt_schedule_common+0x44/0xc0 [ 1484.500810][T23547] ? preempt_schedule_thunk+0x16/0x30 [ 1484.506169][T23547] ? check_panic_on_warn+0x1f/0xb0 [ 1484.511267][T23547] check_panic_on_warn+0xab/0xb0 [ 1484.516196][T23547] end_report+0x107/0x170 [ 1484.520527][T23547] kasan_report+0xee/0x110 [ 1484.524939][T23547] ? __cpa_addr+0x1d3/0x220 [ 1484.529426][T23547] __cpa_addr+0x1d3/0x220 [ 1484.533736][T23547] cpa_flush+0x28b/0x8a0 [ 1484.537962][T23547] ? __pfx_cpa_flush+0x10/0x10 [ 1484.542811][T23547] ? pgprot2cachemode+0x9a/0x130 [ 1484.547729][T23547] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1484.553078][T23547] ? drm_gem_get_pages+0x6a0/0xa10 [ 1484.558275][T23547] change_page_attr_set_clr+0x34e/0x4a0 [ 1484.563810][T23547] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1484.569882][T23547] _set_pages_array+0x1ab/0x2c0 [ 1484.574728][T23547] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1484.580779][T23547] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1484.587360][T23547] ? __pfx___might_resched+0x10/0x10 [ 1484.592627][T23547] drm_gem_shmem_mmap+0xc9/0x550 [ 1484.597548][T23547] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 1484.603702][T23547] drm_gem_mmap_obj+0x1b5/0x560 [ 1484.608539][T23547] drm_gem_mmap+0x40b/0x620 [ 1484.613028][T23547] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1484.618035][T23547] ? vm_area_alloc+0x1f/0x160 [ 1484.622694][T23547] ? lockdep_init_map_type+0x5c/0x280 [ 1484.628049][T23547] __mmap_region+0x1309/0x27a0 [ 1484.632794][T23547] ? __pfx___mmap_region+0x10/0x10 [ 1484.637884][T23547] ? lock_acquire+0x179/0x350 [ 1484.642541][T23547] ? find_held_lock+0x2b/0x80 [ 1484.647197][T23547] ? rcu_is_watching+0x12/0xc0 [ 1484.651961][T23547] mmap_region+0x1ab/0x3f0 [ 1484.656361][T23547] ? __get_unmapped_area+0x267/0x440 [ 1484.661631][T23547] do_mmap+0xa3e/0x1210 [ 1484.665773][T23547] ? __pfx_do_mmap+0x10/0x10 [ 1484.670360][T23547] ? __pfx_down_write_killable+0x10/0x10 [ 1484.675980][T23547] vm_mmap_pgoff+0x29e/0x470 [ 1484.680555][T23547] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1484.685650][T23547] ? __fget_files+0x20e/0x3c0 [ 1484.690312][T23547] ksys_mmap_pgoff+0x32c/0x5c0 [ 1484.695060][T23547] __x64_sys_mmap+0x125/0x190 [ 1484.699723][T23547] do_syscall_64+0xcd/0xfa0 [ 1484.704209][T23547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.710082][T23547] RIP: 0033:0x7f4f2bf8eec9 [ 1484.714484][T23547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1484.734084][T23547] RSP: 002b:00007f4f2ceeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1484.742490][T23547] RAX: ffffffffffffffda RBX: 00007f4f2c1e5fa0 RCX: 00007f4f2bf8eec9 [ 1484.750448][T23547] RDX: 000000000100000d RSI: 0000000000004000 RDI: 0000200000001000 [ 1484.758401][T23547] RBP: 00007f4f2c011f91 R08: 0000000000000004 R09: 0000000100000000 [ 1484.766362][T23547] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1484.774318][T23547] R13: 00007f4f2c1e6038 R14: 00007f4f2c1e5fa0 R15: 00007ffe12a7e3a8 [ 1484.782274][T23547] [ 1484.785491][T23547] Kernel Offset: disabled [ 1484.789791][T23547] Rebooting in 86400 seconds..